ORTUS SOLUTIONS LIMITED

Ortus-iHealth Remote Patient Monitoring and Virtual Ward Platform

Ortus-iHealth’s digital platform enables the digitisation of outpatient care pathways. Through one unified solution, organisations can deliver personalised and customisable remote and virtual ward patient monitoring pathways, including dashboards, PROMs, PREMS, Vitals, questionnaires and content. Ortus supports connected patient devices, integration with EHR and PAS systems and telehealth functionality.

Features

• Configurable, condition agnostic, remote patient monitoring and virtual ward platform
• Automated and customisable clinical pathways, patient-focussed dashboards
• Integrated tele-health functionality, including asynchronous messaging and video
• Automated content including care plans, e-consent, condition education and self-help
• Configurable APIs (FHIR and HL7 v3 compatible)
• Comprehensive reporting functionality, including patient-reported outcome measures (PROMs)
• Condition/specialty-agnostic Class 1 platform
• Flexible delivery across Pathway, Department or Enterprise roll-out
• Training, onboarding, project management and Support included
• Integration with NHS infrastructures (e.g. SPINE Patient Demographics Service, PDS)

Benefits

• Elective list prioritisation and management, supporting Early Patient Discharge
• Enables patient prioritisation of deteriorating patients
• Improved patient questionnaire completion rate (81%)
• 75% reduction in Outpatient DNAs (Did Not Attends)
• Improves up-titration of medication for patients
• Improved operational and service efficiencies
• 58% increased clinic capacity
• 95% patients 'satisfied' or 'very satisfied'
• Patient travel and time costs reduced
• Share data with EHRs, regional care records and other systems

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at nick.niziolomski@ortus-ihealth.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

910778123313235

Contact

Nick Niziolomski
+447802241946
nick.niziolomski@ortus-ihealth.com

About the service

• Service categories:

  Applications

  Production and operations

  Service industry and public sector operations

  • Healthcare
  • Adult Social Care
  • Other
• Multi cloud support: Yes

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Frequently used standalone, but and extension to other systems through integration with APIs with EPRs and other clinical devices and systems.
• Cloud deployment model: Public cloud
• Service constraints: No
• System requirements:
  • Modern web browser: Chrome, Edge, Firefox or Safari
  • Internet connection with minimum 2Mbps bandwidth for clinical users
  • IOS 14+ or Android 10+ for patient mobile app

User support

• Email or online ticketing support: Yes
• Support response times: Response times governed by agreed SLAs tailored to buyer requirements. Standard SLA offers email response within 1 business hour, ticket acknowledgement within 1 hour. Priority levels defined collaboratively during onboarding. Escalation pathways and named account contacts included.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes
• Support levels: Support Levels; We provide three tiers of support:; Standard Support (included in subscription); ; Email and ticket support during business hours (Monday-Friday, 8am-5pm); Response within 4 business hours for standard queries; Critical issues acknowledged within 1 hour; Quarterly service review meetings; ; Enhanced Support (additional cost); ; Extended hours support (Monday-Friday, 7am-8pm); Response within 2 business hours for standard queries; Critical issues acknowledged within 30 minutes; Monthly service review meetings; Named Support Contact for continuity; ; Premium Support Subject to Contract; ; 24/7 support for critical clinical issues; Response within 1 hour for all queries; Dedicated Technical Account Manager assigned; Weekly service reviews during implementation, monthly thereafter; Priority access to new features and roadmap input
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Getting Started; We provide comprehensive customer success support throughout the entire onboarding journey, ensuring users are confident and competent from day one.; Onboarding Process:; Our dedicated implementation team guides organisations through requirements capture, system configuration, integration setup and deployment. A named Customer Success Manager coordinates all activities and serves as the primary point of contact throughout.; Training Provision:; ; On-site training for clinical and administrative teams at buyer locations; Online training via live webinars and self-paced e-learning modules; Train-the-trainer programmes to build internal expertise and sustainability; ; Documentation and Resources:; ; Comprehensive user guides and quick-start documentation; Video tutorials and walkthroughs; Searchable online knowledge base; Clinical pathway configuration guides; ; Go-Live Support:; We provide enhanced support during go-live, with on-site or remote presence to address queries in real-time. Post-deployment reviews ensure the service meets operational requirements, with adjustments made as needed.; Ongoing Success:; Following deployment, regular service reviews, refresher training and access to new feature guidance ensure continued adoption and value realisation. Our customer success team remains engaged throughout the contract lifecycle.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: End of Contract Data Extraction; We ensure smooth and complete data extraction at contract end, enabling organisations to maintain continuity of care and meet regulatory obligations.; Data Extraction Process:; Upon contract termination or expiry, we work collaboratively with the buyer to agree extraction requirements, timelines and preferred formats. Our team provides full support throughout the extraction process to ensure all data is transferred securely and completely.; Formats and Standards:; Data is provided using industry-standard formats including CSV, JSON, XML and HL7 FHIR, depending on buyer requirements and destination system compatibility. We support structured exports aligned with NHS data standards and interoperability requirements.; What is included:; ; Complete patient records and monitoring data; Clinical documentation and care pathway information; Audit logs and activity records; Configuration data and templates where applicable; ; Governance and Security:; All data transfers are conducted via secure encrypted methods. We provide documentation confirming successful extraction and complete deletion of buyer data from our systems upon request, in accordance with GDPR and NHS data protection requirements.; Extraction timelines and specific deliverables are agreed during the exit planning phase, typically commencing three months prior to contract end.
• End-of-contract process: End of Contract Process; We provide a structured and supportive exit process to ensure seamless transition and continuity of care when contracts conclude.; Exit Planning:; Exit planning commences three months prior to contract end. A dedicated project manager coordinates all activities, working with buyer teams to agree timelines, data requirements and transition arrangements.; Included in Contract Price:; ; Full data extraction in industry-standard formats (CSV, JSON, XML, HL7 FHIR); Complete patient records, clinical documentation and audit logs; Secure encrypted data transfer via agreed method; Certification of complete data deletion from our systems; Exit planning meetings and project management support; Documentation of system configurations and integration specifications; Transition support and knowledge transfer sessions; ; Additional Costs:; ; Bespoke data formats or non-standard extraction requirements; Extended contract wind-down periods beyond three months; Additional data transformation or migration services; On-site support during transition to replacement systems; ; Data Governance:; All exit activities comply with GDPR, NHS data protection requirements and Information Governance standards. We provide written confirmation of data destruction upon completion, ensuring full regulatory compliance.; Our objective is to ensure buyers retain complete access to their data with no barriers to transition.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Chrome
  • Safari
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Desktop Service; Clinical users access the platform via a web browser on desktop or tablet devices to utilise full functionality.; Patient Access; Patients can access the service through:; ; Web browser on desktop, smartphone or tablet; Ortus patient mobile application (iOS or Android); ; The patient app supports integration with third-party observation devices including blood pressure monitors and PPG measurement devices. iOS or Android devices are required for Bluetooth-enabled device connectivity.
• Service interface: No
• User support accessibility: WCAG 2.2 AA
• API: Yes
• What users can and can't do using the API: API Capabilities; Our platform supports FHIR and HL7 standards for healthcare system interoperability, enabling seamless integration with existing NHS infrastructure including EPR, PAS and clinical systems. We have proven integrations with regional shared care records and major vendors including Cerner, EMIS, SystmOne and Oracle Health.; What users can do:; ; Retrieve patient demographic and clinical data from connected systems; Submit and receive patient observations and vital signs data; Push clinical alerts and notifications to integrated systems; Exchange care plans and clinical documentation; Query patient records and monitoring status; Receive real-time data from connected medical devices; ; Service configuration:; API endpoints are configured during implementation by our technical team in collaboration with buyer IT departments. Authentication credentials, endpoint URLs and data mapping are established during onboarding. Buyers can request configuration changes through our support channels.; What users cannot do:; ; Self-service API provisioning is not available; setup requires coordination with our implementation team; Direct database access is not provided; all interactions occur through defined API endpoints; Bulk data modifications require prior approval and scheduled implementation windows; Custom API extensions require scoping and development agreement; ; We support bespoke implementations where standard integrations do not meet buyer requirements, scoped and priced during contract negotiation.
• API documentation: Yes
• API documentation formats:
  • PDF
  • Other
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Customisation Capabilities; ; Our platform offers comprehensive customisation to align with local care models and organisational requirements.; ; What can be customised:; ; - Care pathways and clinical escalation protocols; - Diagnoses and condition-specific monitoring parameters; - Virtual consultation flows and appointment workflows; - Clinical dashboards and reporting views; - Patient questionnaires and assessment tools; - Content libraries and educational materials; - Patient and clinician communications and documentation; ; How customisation is performed:; ; Customisation is managed through a user-friendly administration interface with role-based access controls. Technical teams can utilise APIs to connect external systems, import data or automate workflows. Sandbox environments enable teams to test configurations before deployment to live services.; ; Who can customise:; ; Administrators create and modify templates, configure system parameters and manage user permissions; Clinicians adapt pathways and questionnaires to reflect local clinical practice; Content managers maintain libraries and patient-facing materials; ; Governance and safety:; ; All customisation activity is subject to access controls, audit logging and version control, ensuring full traceability. Changes to clinical pathways require appropriate approval workflows before activation, maintaining safety and regulatory compliance throughout.

Scaling

• Independence of resources: Independence of Resources; Our platform is hosted on Microsoft Azure with multi-tenant architecture designed to ensure consistent performance for all users.; Resource isolation is achieved through dedicated application instances, load balancing and auto-scaling capabilities that dynamically allocate capacity based on demand. Database segregation ensures each organisation's data and queries operate independently.; Performance monitoring continuously tracks system metrics, enabling proactive scaling before user experience is impacted. Rate limiting prevents individual users from consuming disproportionate resources.; Service Level Agreements guarantee minimum uptime and response times regardless of overall platform demand.

Analytics

• Service usage metrics: Yes
• Metrics types: Service Usage Metrics; We provide comprehensive usage metrics via regular scheduled reports, ad-hoc reports, interactive dashboards and optional API access for programmatic integration.; Available Metrics:; ; Request counts and user activity volumes; System latency and response times; Error rates and platform throughput; Usage breakdown by service area or user group; ; Dashboards support real-time monitoring with customisable filters and time-range analysis. Reports can be scheduled or generated on demand.; API access enables integration with buyer's internal monitoring or billing systems for automated data retrieval.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Physical access control, complying with another standard
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase
  • Physical Destruction / Hardware containing data is completely destroyed

Data importing and exporting

• Data export approach: Users access data export functionality through a dedicated administration section. We provide exports in industry-standard formats including CSV, JSON and XML, with selectable data ranges and record types.; Bulk and incremental exports are supported, with compressed download options and secure transfer methods. All exports use authenticated, time-limited download links with email notification upon completion.; API endpoints enable automated exports with pagination and rate limiting for technical teams. All export requests are logged for audit purposes, with full metadata and data schema documentation included.; Support contacts are provided for export assistance.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • SQL
  • JSON
• Data import formats:
  • CSV
  • Other
• Other data import formats: Subject is to discussion.

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • Other
• Other protection between networks: Protection Between Networks; All data transmitted between buyer networks and our platform is protected using TLS 1.3 with 256-bit encryption.; TLS 1.3 provides modern cipher suites minimising exposure to known protocol attacks, forward secrecy ensuring session keys cannot be compromised retrospectively, and faster connection setup without compromising security.; Certificate-based authentication validates connection endpoints and HSTS enforcement prevents protocol downgrade attacks.; Our approach aligns with NCSC Cloud Security Principle 1: Data-in-Transit Protection, meeting government expectations for securing data exchanged between networks.
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Guaranteed Availability; We guarantee 99.9% platform availability, measured monthly, excluding scheduled maintenance windows.; Service Level Agreement:; ; Core platform availability: 99.9%; Scheduled maintenance: Performed outside core hours (typically 2am-6am) with minimum 5 working days' notice; Emergency maintenance: Notification provided as soon as practicable; ; Measurement:; Availability is calculated as total minutes in month minus downtime, divided by total minutes, expressed as a percentage. Downtime excludes scheduled maintenance, buyer-side connectivity issues and third-party service outages beyond our control.; Service Credits:; If availability falls below guaranteed levels, service credits are applied:; ; 99.0% - 99.9%: 5% credit of monthly fee; 95.0% - 99.0%: 15% credit of monthly fee; Below 95.0%: 50% credit of monthly fee; ; Credits are applied to subsequent invoices upon request. Claims must be submitted within 30 days of the affected month.; Exclusions:; Force majeure events, buyer-requested changes, and third-party integration failures are excluded from availability calculations.
• Approach to resilience: Approach to Resilience; Our platform is designed for high availability and resilience, hosted on Microsoft Azure's UK data centres which provide enterprise-grade infrastructure resilience.; Infrastructure Resilience:; ; Deployed across multiple Azure Availability Zones within UK regions; Automatic failover capabilities between geographically separated data centres; Redundant power supplies, cooling systems and network connectivity; Physical security including 24/7 monitoring, biometric access and perimeter controls; ; Application Resilience:; ; Load balancing options offer traffic distribution across multiple application instances; Database replication with automated failover ensures data availability; Regular automated backups with point-in-time recovery capabilities; ; Business Continuity:; ; Documented disaster recovery procedures with defined RTOs and RPOs; Regular failover testing and disaster recovery exercises; Incident response procedures aligned with ITIL best practices; Real-time monitoring and alerting for proactive issue resolution; ; Data Protection:; ; Geographically redundant storage options can replicates data across UK regions; Encrypted backups stored in separate locations; Regular backup integrity verification; ; Specific resilience configurations, recovery time objectives and detailed architectural documentation are available on request and subject to agreed SLAs and customer requirements.
• Outage reporting: Outage Reporting; We provide clear and timely communication during any service disruptions.; Email Alerts:; ; Automated notifications sent to designated customer contacts when incidents are detected; Updates provided throughout incident lifecycle: identification, investigation, resolution and post-incident review; Scheduled maintenance communicated minimum 5 working days in advance; ; Account Management:; ; Named Customer Success Manager provides direct communication during major incidents; Post-incident reports provided for significant outages detailing root cause and preventive measures; Direct escalation contact available for urgent queries; ; Azure Infrastructure Status:; Underlying infrastructure status available via Microsoft Azure Status Dashboard, providing transparency on platform-level incidents affecting our hosting environment.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: Access Restrictions; We implement role-based access control (RBAC) across all management interfaces and support channels.; Users are assigned roles with minimum necessary permissions based on job function. Administrative access is restricted to authorised personnel only, with elevated privileges requiring additional approval and MFA authentication.; Controls include:; ; Granular permission levels for clinical, administrative and technical roles; Segregation of duties preventing single-user control of critical functions; Access requests require manager authorisation; Regular access reviews to verify appropriate permissions; Audit logging of all management interface activity; Immediate access revocation upon role change or departure
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: Cyber Essentials and Cyber Essentials Plus.; NHS-DSPT, Data Security and Protection Toolkit.; We are also currently working to SOC 2 compliance.
• Information security policies and processes: Information Security Policies and Processes; Our information security framework is aligned with ISO 27001 principles and NHS Data Security and Protection Toolkit (DSPT) requirements.; Key Policies:; ; Information Security Management Policy; Access Control and User Management Policy; Data Classification and Handling Policy; Incident Response and Breach Management Policy; Business Continuity and Disaster Recovery Policy; Acceptable Use and Staff Security Policy; Supplier and Third-Party Security Policy; ; Reporting Structure:; Security governance is overseen at board level, with the Chief Executive holding overall accountability. A designated Data Protection Officer manages day-to-day compliance and reports directly to senior leadership. Security matters are reviewed at monthly management meetings with escalation pathways for critical issues.; Ensuring Compliance:; ; Mandatory staff security training at induction and annually thereafter; Regular internal audits against policy requirements; Automated technical controls enforcing access restrictions; Continuous monitoring and logging of system activity; Annual third-party penetration testing and vulnerability assessments; Incident reporting procedures with root cause analysis; ; Policy documentation is reviewed annually or following significant changes, ensuring alignment with evolving regulatory requirements and industry best practices.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Configuration and Change Management; All system components are tracked in a Configuration Management Database from deployment through decommissioning, with version control maintained for code and infrastructure configurations.; Changes follow a formal process: logged, categorised by risk, and reviewed before approval. Testing is conducted in staging environments prior to production deployment with documented rollback procedures.; Security Impact Assessment:; Security review is mandatory for changes affecting data, access or integrations. Changes are assessed against security baselines, with vulnerability scanning following significant deployments and annual penetration testing.; Full audit trails capture all configuration changes.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Vulnerability Management Process; We continuously scan systems using automated tools and manual reviews, prioritising vulnerabilities by asset criticality, exploitability and potential impact.; Threat Intelligence:; Assessment draws from threat intelligence feeds, vendor advisories, CVE/NVD databases and industry ISACs.; Patch Deployment SLAs:; ; Critical/High: 24-72 hours; Medium: 7-14 days; Low: Scheduled maintenance cycles; ; Patches are validated in staging environments with rollback plans before production deployment. Compensating controls are implemented where immediate patching is not feasible. Post-patch verification confirms successful remediation.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Protective Monitoring Processes; Identifying Compromises:; Continuous monitoring via automated security tools, log analysis and anomaly detection. Real-time alerting triggers on suspicious activity including unusual access patterns, failed authentication attempts and unexpected data transfers.; Incident Response:; Confirmed compromises invoke our incident response procedure: immediate containment, investigation, remediation and recovery. Affected customers are notified per contractual and regulatory requirements.; Response Times:; ; Critical incidents: Within 1 hour; High severity: Within 4 hours; Medium/Low: Within 24 hours; ; Post-incident reviews identify root cause and preventive measures.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: Incident Management Processes; Pre-defined Processes:; We follow established playbooks for common incidents including service outages, security events and performance issues.; Reporting Incidents:; Users report incidents via support portal, email or phone. Automated monitoring also generates tickets for detected issues. Triage assigns priority and owner within 15 minutes with immediate containment actions.; Communications:; Reporters receive acknowledgement, status updates at regular intervals and escalation per severity level.; Incident Reports:; Post-incident root-cause analysis is conducted and documented. Incident reports detail findings, remediation actions and preventive measures. Follow-up actions are tracked through to closure.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: Yes
• Connected networks: Health and Social Care Network (HSCN)

Pricing

• Discount for educational organisations: Yes
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 5%
• Between £500,001 and £1,000,000: 8%
• Between £1,000,001 and £2,500,000: 12%
• Between £2,500,001 and £5,000,000: 15%
• Over £5,000,001: 0%

Standards and certifications

• ISO/IEC 27001 certification: Yes
• ISO/IEC 27001 accredited by: Citation ISO Certification Limited.
• ISO/IEC 27001 accreditation date: Monday 21 June 2021
• What the ISO/IEC 27001 doesn’t cover: Our ISO 27001 certification covers the provision of our application suite including development, delivery, maintenance, support and management of our Software as a Service platform.; The following are outside the scope of our certification:; Third-party infrastructure:; ; Microsoft Azure data centre operations and physical infrastructure (covered by Azure's own ISO 27001 certification); Third-party integrations and connected systems operated by other providers; ; Customer responsibilities:; ; Buyer's internal networks, devices and endpoints; Buyer's user management and access control decisions; Buyer's data input and clinical usage of the platform; ; Non-production environments:; ; Development and testing environments used for internal purposes only; Proof of concept or pilot implementations prior to formal contract; ; Professional services:; ; Ad-hoc consultancy services outside the core SaaS platform; Bespoke development work not yet integrated into the certified platform; ; Our certification boundary aligns with the service delivered to buyers. Third-party infrastructure providers maintain their own certifications, and buyers retain responsibility for their own environment security. Certification documents detailing the full scope are available upon request.
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: 32b20347-7112-409c-9278-3d55a8f0e6a2
• Cyber essentials plus: Yes
• Cyber Essentials Plus Certificate Number: 7c308a20-a048-450f-add3-17b76c34a695
• Other security certifications: Yes
• Any other security certifications: NHS DSP T Ortus Solutions Limited 98jr73)

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

  • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
  • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
  • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
  • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors

  Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

  • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges

  Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

  • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
  • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
• Mission: Make Britain a clean energy superpower:

  To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

  Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

  • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
  • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
• Mission: Break down barriers to opportunity:

  By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

  Policy Outcome 6: Employment and training: For those who face barriers to employment

  • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
  • Introducing transparency to pay and reward processes
  • Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

  Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

  • Understanding of the issues affecting the development of new skills by target cohort
• Mission: Build an NHS fit for the future:

  That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

  Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

  • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
  • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at nick.niziolomski@ortus-ihealth.com. Tell them what format you need. It will help if you say what assistive technology you use.