PHARMATELLIGENCE LIMITED

Livingstone

Livingstone is an online advanced SAAS analytical platform that automatically analyses electronic medical record data to produce scientifically robust, replicable outputs.

Features

• Cohort design and feasibility
• Signal extraction from raw EMR data
• Continuous drug exposure modelling and inference
• Study design and protocol generation
• Incidence, prevalence, and time-to-event analyses
• Healthcare utilisation and cost analytics
• AI powered code search and clinical concept mapping
• Federated deployment in client TRE/SDE environments
• Audit-ready, versioned, reproducible study pipelines

Benefits

• Faster, reproducible real-world evidence generation
• Reduced protocol-to-analysis translation errors
• Consistent clinical definitions across all studies
• Rapid feasibility and cohort size estimation
• Lower engineering overhead for bespoke analyses
• Improved auditability for regulators and payers
• Scalable analyses across multiple data sources
• Faster client onboarding and time to value
• Higher confidence in study validity and traceability

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at stephen.vaughan@humandatasciences.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

407484504649427

Contact

Stephen Vaughan
+442920782856
stephen.vaughan@humandatasciences.com

About your service

• Service categories:

  Application Development and Deployment

  Analytics and business intelligence

  • Advanced and predictive analytics
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: No
• System requirements:
  • SaaS licence agreement between supplier and buyer
  • Internet connection
  • Access to browser

User support

• Email or online ticketing support: Yes
• Support response times: Response times are as outlined in our Service Level Agreement based on pre-defined Priority categories. ; ; Priority 1 – within 4 normal business hours ; ; Priority 2 – within 12 normal business hours ; ; Priority 3 – within 24 normal business hours ; ; Priority 4 – within 72 normal business hours ; ; Normal business hours are defined as Monday to Friday 9:00am – 5:00pm
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Yes, at an extra cost
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: Users will be able to access web chat from the platform for any queries relating to LivingstoneIQ. Support will be provided by our in-house team of experts as required depending on the type of query received within the timescale defined within the SLA.
• Web chat accessibility testing: N/A
• Onsite support: Yes, at extra cost
• Support levels: The support levels provided are dependent on the subscription package level. ; ; The provision of Support Services on a remote, off-site basis (such as over the telephone or by e-mail) within the Subscription Term shall be included in the Subscription Fees. ; ; The provision of Support Services at the Customer's premises or the provision of Out-of-scope Services shall be charged for at the Supplier's standard rates then in force.
• Support available to third parties: No
• AI chatbot: No

Onboarding and offboarding

• Getting started: Getting started. On-site and online training. User guides and videos. Online and phone in person support.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: At contract end user log ins are terminated. Reports can be held in perpetuity, subject to governance.
• End-of-contract process: No additional costs
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Via the application

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Accessed via web service interface. No interface testing has been completed. Interface is not fully accessible.
• Accessibility standards: None or don’t know
• Description of accessibility: Accessed via web service interface. No interface testing has been completed. Interface is not fully accessible.
• Accessibility testing: No interface testing has been completed.
• API: No
• Customisation available: No

Scaling

• Independence of resources: Using the scaling technologies provided by the cloud service provider

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Staff screening not performed
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: In-house
• Protecting data at rest: Other
• Other data at rest protection approach: Using the protect data at rest processes provided by the cloud software provider
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data importing and exporting

• Data export approach: Livingstone is a Trusted Research Environment that enables analysis of data and production of output reports that can be exported to PDF. “Data” can be exported subject to formal request and data governance approval.
• Data export formats:
  • CSV
  • Other
• Other data export formats: Parquet
• Data import formats:
  • CSV
  • Other
• Other data import formats: Other

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: The Supplier shall use commercially reasonable endeavours to make the Services available 24 hours a day, seven days a week, except for: ; ; a) planned maintenance carried out during the maintenance window of 6.00 pm to 6.00 am UK time; and ; ; b) unscheduled maintenance performed outside Normal Business Hours, provided that the Supplier has used reasonable endeavours to give the Customer at least 24 hours notice in advance.
• Approach to resilience: Available on request.
• Outage reporting: N/A

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: Access to management interfaces and support channels is restricted through unique user accounts protected by usernames and strong passwords, with multi-factor authentication (MFA) enforced for all privileged and administrative access.; ; Authentication is centrally managed, ensuring that:; ; Each user has an individual account (no shared credentials); ; MFA is required in addition to username and password; ; Access is granted on a least-privilege basis, aligned to job role; ; Administrative access is limited to authorised personnel only; ; Management interfaces are accessible only to authenticated users, and access can be revoked promptly when no longer required.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users receive audit information on a regular basis
• How long supplier audit data is stored for: Between 1 month and 6 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Our information security policies and processes are compliant with ISO 27001:2022. This standard requires that the scope of our information security management system (ISMS) is defined. From this a security policy is created and a risk assessment carried out to determine existing and potential risks. Controls and processes to manage those risks were then put in place in accordance with Annex A of the ISO standard. Reporting is through the usual line management channels up to CEO level. Compliance with security policies and processes is monitored through regular management review meeting and audits (both internal and external). Where appropriate, electronic countermeasures are deployed in the network to ensure compliance with the controls and to prevent unauthorised access. Our ISMS is scrutinised regularly by both internal and external auditors and all nonconformities, opportunities for improvement and observations recorded in a Corrective Action Plan, the content of which is monitored and reviewed by our CEO in conjunction with the senior management team.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: We use our vendors asset management and our own asset management spreadsheet. Additionally, we work with the vendors and internally assess the risks Further to this, our ISO Change Management process means that we evaluate every change to our IT infrastructure, both from a cost/benefit perspective and in terms of risk to information security. We also look at the fallback strategy required should the implementation of the change fail for any reason.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: We use Sophos and best practices. If the patch is considered critical then we do an emergency change so patch will be applied asap and if not critical it falls under quarterly maintenance schedule ; ; Our information about potential threats primarily comes from our vendors with emphasis on Sophos who specialise in these matters. ; ; Our internal team manages when patches are applied to our servers. Individuals are responsible for keeping their own laptop/PC up to date and this requirement is stated within our ISO Acceptable Use policy.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: We primarily identify potential compromises from our vendors with emphasis on Sophos who specialise in this area. ; ; Our response will depend on the threat, and we will always respond using industry best practices ; ; We respond to incidents as quickly as possible. Within ISO we have an Incident Management process which we follow. If there is a breach of information as a consequence of a security incident, then there is checklist of who we must notify (e.g., the individual whose data has been disclosed, whether the ICO needs to be notified, etc.).
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: Our approach complies with ISO 27001:2022 and include the following steps: ; ; • Notification: An event that may affect the organisation is detected. ; ; • Classification: An incident notification is created and classified. ; ; • Reporting: Interested/affected parties are informed (possibly the ICO too). ; ; • Treatment: Once the incident is classified, and the severity and time agreed for its resolution are known, the necessary measures to resolve it are taken. ; ; • Closure: Once the incident is resolved, all information generated during its treatment is recorded. ; ; • Knowledge base: All information generated during the incident is recorded, for future reference and continuous improvement purposes.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 5%
• Between £250,000 and £500,000: 6%
• Between £500,001 and £1,000,000: 7%
• Between £1,000,001 and £2,500,000: 8%
• Between £2,500,001 and £5,000,000: 9%
• Over £5,000,001: 10%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: BSI
• ISO/IEC 27001 accreditation date: Tuesday 7 April 2026
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
    • Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
    • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Offering a range of quality opportunities with routes of progression if appropriate, e.g. T Level industry placements, students supported into higher level apprenticeships.
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Understanding of the issues affecting the development of new skills by target cohort
    • Understanding of issues relating to entering the contract workforce

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at stephen.vaughan@humandatasciences.com. Tell them what format you need. It will help if you say what assistive technology you use.