HealthOrbit AI

AI Ambient Scribe

HealthOrbit AI Ambient scribe enables doctors to capture their consultations and sessions to generate clinical notes in a format of their choice, while generating insurance codes, prescriptions, investigation orders etc

Features

• Automates clinical workflows for doctors and hospitals
• End to end revenue cycle management
• Generates discharge summaries, referral letters etc
• Real time data analytics
• Integration with EHR / HIS systems

Benefits

• Improves clinical documentation
• Reduces documentation time for doctors
• Impacts top line revenue by reducing insurance claim rejections
• Provides real time analytics
• Improves patient care

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at jobin.jose@healthorbit.ai. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

877602099580232

Contact

Jobin Jose
+44 7570 312208
jobin.jose@healthorbit.ai

About your service

• Service categories:

  Application Development and Deployment

  Application platforms

  • Model driven application platforms
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: No there are no service constraints with respect to HealthOrbit AI
• System requirements:
  • Relatively new versions of chrome, edge browsers
  • Quality audio input

User support

• Email or online ticketing support: Yes
• Support response times: We have defined SLAs that will be followed
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AAA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), 7 days a week
• Web chat support: Yes
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: WCAG 2.2 AAA
• Web chat accessibility testing: Multiple customers use our web chat feature
• Onsite support: Yes
• Support levels: We offer platinum,gold and silver support plans. Customer success manager and cloud support engineers are assigned to each HealthOrbit customer with a clearly defined escalation path.
• Support available to third parties: Yes
• AI chatbot: Yes

Onboarding and offboarding

• Getting started: Users can self onboard with out of the box self start videos and guides. HealthOrbit also provides online onboarding and user documentations. Onsite training is provided for enterprise customers based on need
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: HealthOrbit defines a data retention plan with each and every customer during the agreement. Data retention and extraction will be done as per this agreement. HealthOrbit works with customers to draft this based on their needs
• End-of-contract process: Data sharing at the end of the contract is included.
• Documentation accessibility standard: WCAG 2.2 AAA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: There are no differences in terms of functionalities or capabilities between mobile app and browsers
• Service interface: Yes
• User support accessibility: WCAG 2.2 AAA
• Description of service interface: HealthOrbit uses FHIR , HL7 complied Restful APIs
• Accessibility standards: WCAG 2.2 AAA
• Accessibility testing: INtegtation testing with SystmOne , EMIS , Cerner etc
• API: Yes
• What users can and can't do using the API: Exchange data between various systems like SystmOne, EMIS, EPIC , Cerner, Message exchange systems etc
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: Yes
• Customisation available: No

Scaling

• Independence of resources: HealthOrbit is a horizontally and vertically scalable system designed to manage millions of concurrent requests from users across geographies.

Analytics

• Service usage metrics: Yes
• Metrics types: Dashboards and reports
• Reporting types:
  • Real-time dashboards
  • Regular reports
• Resource tagging: Yes
• FOCUS resource tagging: Yes

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: HealthOrbit can provide interfaces for the authorized customer admins to extract data from the system
• Data export formats: CSV
• Data import formats:
  • CSV
  • Other
• Other data import formats: PDF

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Legacy SSL and TLS (under version 1.2)

Availability and resilience

• Guaranteed availability: HealthOrbit offers 99.9% uptime to our customers. Any planned maintenance will be notified upfront.
• Approach to resilience: Our service is designed with a 'design for failure' mindset, assuming that network latency, service outages, and hardware failure are inevitable.; Fault Isolation: We use a microservices architecture that limits the blast radius. If our 'recommendations' service fails, it is isolated using the bulkhead pattern, ensuring the checkout and user profile services remain unaffected.; Redundancy: We deploy across three Availability Zones (Multi-AZ), with automated failover mechanisms to a standby database instance, ensuring high availability.; Circuit Breaking: We implement circuit breakers (via Resilience4j) to fail fast on external dependencies, which prevents our application from becoming unresponsive due to slow downstream services.; Graceful Degradation: In case of a database slowdown, the system serves cached data to users, maintaining a, degraded, but functional user experience.; Testing: We regularly perform chaos engineering simulations in production, intentionally shutting down instances to verify that our auto-scaling and failover protocols work as designed.
• Outage reporting: Email alerts, real time notifications

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: Multi factor authentication and rigorous monitoring,
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Our security policy is defined as per SOC Type 1 and Type 2 standards, Our chief security officer and a team of cloud security analysts oversees all the security operations
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Detailed change management process is submitted with the customer at the time of contract. HealthOrbit is flexible to make amendments to the change management process to accommodate any compliances, requirements the customer may have
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Our vulnerability management process is a continuous five-step lifecycle aimed at risk reduction.; Discovery: We use automated tools for continuous inventory of our hybrid cloud and on-prem assets.; Assessment: We run daily/weekly scans to find vulnerabilities.; Prioritization: We use a risk-based approach, combining CVSS scores with threat intelligence to focus on exploitable flaws on critical assets.; Remediation: We patch, mitigate, or accept risk, typically patching high-risk issues within based on our SLA.; Verification: We rescan to confirm the patch worked and report metrics to leadership to ensure continuous improvement.".
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Our protective monitoring process is a 24/7, risk-based approach designed for real-time threat detection. We start by identifying our critical assets and establishing baselines. We collect logs from our network, EDR, and cloud services into a centralized SIEM, using behavioral analytics to spot anomalies. Our SOC team follows pre-defined playbooks to triage alerts, utilizing SOAR tools for immediate containment of threats. Finally, we regularly tune our detection rules and conduct, post-incident reviews to continuously improve our posture
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: We follow a structured, ITIL-aligned framework designed to restore normal service operations rapidly while minimizing impact on your business.; 1. Immediate Detection & Triage; 2. Rapid Response & Resolution; 3. Transparent Communication; 4. Continuous Improvement; Users can report incidents through multiple channels like phone, chats, support desk etc. Incident and SLA reports are published periodically
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: Yes
• Connected networks: Other
• Other public sector networks: NHS PDS

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: 14-day free trial. Includes full access to AI Ambient Scribe for a limited number of users, onboarding and standard support. Excludes custom integrations, bespoke templates/workflows, additional implementation services, and long-term contract pricing. Trial is time-limited to 14 days and ends automatically unless extended by mutual agreement.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 10%
• Between £250,000 and £500,000: 10%
• Between £500,001 and £1,000,000: 15%
• Between £1,000,001 and £2,500,000: 15%
• Between £2,500,001 and £5,000,000: 20%
• Over £5,000,001: 20%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: UAF
• ISO/IEC 27001 accreditation date: Friday 16 August 2024
• What the ISO/IEC 27001 doesn’t cover: Our ISO/IEC 27001:2022 certification covers the Information Security Management System (ISMS) for protection of information assets, secure development and maintenance of HealthOrbit products, management of electronic health records and clinical data security, and secure interoperability with other healthcare systems, as defined in the certificate scope/SoA. Any third-party services used outside this scope (for example customer-managed systems or external suppliers not under our ISMS control) are not covered.
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: Fd17025c-1be1-4c0d-8d2d-5406a985e145
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: Aea8c2da-c581-42e6-ad76-ce34a6f3ff7a
• Other security certifications: Yes
• Any other security certifications: ISO 27018

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at jobin.jose@healthorbit.ai. Tell them what format you need. It will help if you say what assistive technology you use.