HUMA THERAPEUTICS LIMITED

GDm-Health

GDm-Health is a remote monitoring platform for people with diabetes in pregnancy. GDm-Health enables patients to record blood glucose levels (tagged with their meal times and medications) using a smartphone app, and enables clinical teams to review these readings in real time in order to inform clinical decision-making.

Features

• Widely used: 66+ NHS trusts and 100K patients using GDm-Health
• Highly intuitive and easy-to-use for patients and clinicians
• Patient blood glucose readings tagged by meal type and medications
• Clinical teams view patient readings in real-time in charts
• Bluetooth connectivity with leading blood glucose meters
• Patients can request call back from clinical team easily
• Patient app training videos available on YouTube in 10 languages
• Unlimited clinician users and sites per trust
• Audit logs enable multidisciplinary teams to safely manage patients
• App is free on App Store and Google Play

Benefits

• Release capacity - GDm has reduced diabetes appointments by 47%
• Faster treatment optimisation - GDm has 21% faster time-to-treatment
• Highly valued by users - 100% patient satisfaction
• Improve safety - 42% reduction in preventable C-sections
• 16% reduction in women requiring pharmacological treatment
• Improve compliance - 31% improvement in BG monitoring compliance
• Enhance safety - 64% reduction in pre-term births
• Educational support for self-management
• Messaging capability for clinicians
• Cloud based - easy to deploy for the NHS

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at aman.kundraw@huma.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

842449806384948

Contact

Aman Kundraw
07943881778
aman.kundraw@huma.com

About the service

• Service categories:

  Applications

  Production and operations

  Service industry and public sector operations

  • Healthcare
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: The Clinician Portal is accessible from any device via standard internet access and is compatible with the following web-browsers (most recent version and one previous version of each web-browser are supported): Chrome, Firefox, Safari, Opera, Electron and Microsoft Edge.; ; The GDm-Health patient app is available in UK app stores for both iOS (Apple) and Android. The app supports Android version 6 and above and iOS 13 and above. If a patient does not have an iOS or Android device, they will not be able to download the GDm-Health patient app.
• System requirements:
  • Clinician Portal available on all major web-browsers
  • Atient App available on Android and iOS smartphones

User support

• Email or online ticketing support: Yes
• Support response times: Ongoing support is provided via the support.diabetes@huma.com and through our embedded conversation tool (powered by Intercom).; ; Huma’s resolution times are generally <2 hours for queries within working hours.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Yes
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: WCAG 2.2 AA
• Web chat accessibility testing: Huma undertakes web-chat testing with assistive technology users as part of it's compliance to WCAG 2.2 standards
• Onsite support: Yes, at extra cost
• Support levels: Huma provides both initial on-boarding support and readily available ongoing support.; ; Onboarding support includes a training session for the ‘Super Users’ and ‘Admins’ at each Trust, followed by a User Acceptance Testing session wherein clinician users of the GDm-Health platform walk through a structured checklist and ensure that they know how to utilise every functionality of the app and portal.; ; Ongoing and technical support is provided via the support.diabetes@huma.com email address and through an embedded conversation tool within (powered by Intercom).; ; Huma’s resolution times are <2 hours for most queries.
• Support available to third parties: Yes
• AI chatbot: Yes

Onboarding and offboarding

• Getting started: Huma provides both initial on-boarding support and readily available ongoing support..; ; Onboarding support includes a training session for the ‘Super Users’ and ‘Admins’ at each Trust, followed by a User Acceptance Testing session wherein clinician users of the GDm-Health platform walk through a structured checklist and ensure that they know how to utilise every functionality of the app and portal.; ; Ongoing and technical support is provided via the support.diabetes@huma.com email address and through an embedded conversation tool within (powered by Intercom).
• Service documentation: Yes
• Documentation formats: HTML
• End-of-contract data extraction: All data can be exported from the Clinician Portal at any time through the export feature.
• End-of-contract process: At the end of a contract, Huma works with the client to agree a full handover process.
• Documentation accessibility standard: WCAG 2.2 A

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The Patient App is available on Android and iOS devices.
• Service interface: Yes
• User support accessibility: WCAG 2.2 A
• Description of service interface: Huma’s GDm-Health platform connects patients with gestational diabetes and their clinical teams, facilitated by real-time visualisation of data, without recourse to face-to-face appointments. Huma’s technology comprises a smartphone Patient App (available on Android and iOS) and a web-browser based Clinician Portal.
• Accessibility standards: WCAG 2.2 A
• Accessibility testing: Huma works with assistive technology users to complete interface testing as part of our compliance to WCAG 2.1 standards
• API: No
• Customisation available: No

Scaling

• Independence of resources: GDm-Health is supported by Microsoft Azure. The platform undergoes frequent load testing to ensure users aren't affected by the demands of other users.

Analytics

• Service usage metrics: Yes
• Metrics types: Huma's analytics platform provides insights into platform usage. Typical standard usage metrics that can be reported include, for example: number of user / patient registrations, number of active users / patients, time spent using the Clinician Portal, user / patient gender comparison, user / patient age comparison, usage per App data collection module. This data can be analysed over various time periods.
• Reporting types:
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Equipment disposal approach: In-house destruction process
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data importing and exporting

• Data export approach: Users can export all data directly from the Clinician Portal at any time.
• Data export formats: CSV
• Data import formats: Other
• Other data import formats:
  • Manual health data through Patient App
  • Through connected medical devices (Agamatrix WaveSense Jazz, Contour Next One)

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Target Uptime – subject to the exclusions set out below, Huma shall aim to make the Software Solution available 24 hours per day, 7 days per week, 365 days per Year at the below service availability levels.; ; Service Availability – 99.5%, measured on a Quarterly basis.; ; The following shall not be included in the calculation of service availability: (i) outages, disruption or downtime caused by the Client; (ii) a Force Majeure event; or (iii) Scheduled Downtime.
• Approach to resilience: The platform is hosted on UK based cloud servers provided by Microsoft Azure. All data is backed-up and stored in line with national standards and policies.
• Outage reporting: Any interruptions to the service are communicated to all users via Intercom support platform.

Identity and authentication

• User authentication needed: Yes
• User authentication: Multi-Factor Authentication (MFA)
• Access restrictions in management interfaces and support channels: All API's require the user to have authenticated
• Access restriction testing frequency: At least once a year
• Management access authentication: Multi-Factor Authentication (MFA)

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: The information security policies and processes are all contained within the company Quality Management System and Technical Files. This includes the information security policies and processes that satisfy the requirements for the Information Governance Toolkit produced by the Department of Health (DH) and hosted by the Health and Social Care Information Centre (HSCIC). Huma's Quality Representative ensures that these policies and conveyed to the company. The Quality representative reports to Huma's Executive Leadership Team, including board-level person(s) responsible for service security. The processes include periodic audit, penetration testing - where appropriate, the results of these are reported to the Executive Leadership.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: All configuration is managed in our source repository which gets reviewed and versioned prior to release
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Huma servers are patched monthly and we can deploy critical fixes within 12 hours after going through integration testing
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Huma deploys various forms of integration tests which ensure the API is fit for purpose and can deploy fixes within 12 hours
• Incident management type: Supplier-defined controls
• Incident management approach: Huma follows a lightweight ITIL Incident management process
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 15%
• Between £500,001 and £1,000,000: 20%
• Between £1,000,001 and £2,500,000: 25%
• Between £2,500,001 and £5,000,000: 30%
• Over £5,000,001: 30%

Standards and certifications

• ISO/IEC 27001 certification: Yes
• ISO/IEC 27001 accredited by: BSI
• ISO/IEC 27001 accreditation date: Tuesday 25 November 2025
• What the ISO/IEC 27001 doesn’t cover: There are no exclusions in the scope of our ISMS
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: 675a6f9c-077b-430b-93e0-9ba0084dcaec
• Cyber essentials plus: Yes
• Cyber Essentials Plus Certificate Number: Ee13ea4d-c95d-4488-82ad-053361c91272
• Other security certifications: No

Social value

• Mission: Build an NHS fit for the future:

  That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

  Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

  • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
  • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at aman.kundraw@huma.com. Tell them what format you need. It will help if you say what assistive technology you use.