GENESIS AUTOMATION (UK) LIMITED

Genesis Inventory Management & Scan 4 Safety SaaS Solution

Complete Clinical Traceability, Scan4 Safety and analytics

Features

• Clinical Traceability
• Scan4safety
• Business analytics
• Inventory management

Benefits

• Patient safety
• Cost reduction

£53,500 to £78,500 a licence a year

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@genesisahc.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

107337211435270

Contact

Robert Wood
+44 7949 736577
tenders@genesisahc.com

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: EHR, P2P, CATALOGUE
• Cloud deployment model: Public cloud
• Service constraints: NONE
• System requirements:
  • PC
  • HANDHELD DEVICES
  • HTML5 BROWSER
  • INTERNET CONNECTION

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: SLA matrix provided relevant to urgency
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Web chat
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: Online messaging
• Web chat accessibility testing: None
• Onsite support: Onsite support
• Support levels: Manuals, video support, Customer success managers, customer support desk
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Training, manuals, video tutorials
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Data can be exported for deleted
• End-of-contract process: Licenses are disabled and data can be exported to new provider or storage.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • Windows
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Honeywell and Zebra selected devices running Android OS.
• Service interface: Yes
• User support accessibility: WCAG 2.1 AA or EN 301 549
• Description of service interface: Web and mobile based. Simplistic design.
• Accessibility standards: WCAG 2.1 AA or EN 301 549
• Accessibility testing: Alt text size, keyboard navigability, AA compliant colour palette, clear navigation.
• API: Yes
• What users can and can't do using the API: - Interface with other systems such as ERP, EHR, Finance, P2P, Catalogue systems.; - API services are provided on scope sign off and contract agreement. Users can exchange data with the Genesis systems and their internal systems based on scope agreed. UAT & PROD environments provided.
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
  • ODF
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: The system is able to be customised to match users profiles and workflows

Scaling

• Independence of resources: Outsourced to AWS

Analytics

• Service usage metrics: Yes
• Metrics types: Full analytics is provided as part of the solution
• Reporting types:
  • Real-time dashboards
  • Regular reports

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: In-house
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: In-house destruction process

Data importing and exporting

• Data export approach: Data export feature across the application for exporting result sets.
• Data export formats:
  • CSV
  • ODF
  • Other
• Other data export formats:
  • Excel
  • PDF
  • HTML
  • TXT
  • XML
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: Private network or public sector network
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: 1. System Availability; Based off 30 Day Month / 92 Day Quarter / 365 Day Year; Availability % Downtime / Day Downtime / Week Downtime / Month Downtime / Quarter; 99% 14 mins 1h 40m 7h 12m 22h 4m; which the Production Service is available to the Customer, excluding Scheduled Downtime and Emergency Maintenance.; ; Production Service may be performed. The Scheduled Maintenance Window is between the hours of 21:00 and 03:00 local time. In the event Genesis expects the Scheduled Maintenance Window activity to; result in the Production Service being unavailable, Genesis will provide the customer with a minimum of three (3) business days advanced notice.; Maintenance Window hours that is required to complete the application of urgent patches or fixes or undertake other urgent maintenance activities. If Emergency Maintenance is required Genesis will; promptly contact the customer and provide the expected start time and the expected duration of the Emergency Maintenance, and if Genesis expects the Production Service to be completely unavailable; during the Emergency Maintenance.
• Approach to resilience: Available on request
• Outage reporting: API & email

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: Username/Password, MFA, AWS Security Controls.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: Between 6 months and 12 months
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: AWS Cloud provider
• ISO/IEC 27001 accreditation date: 15032024
• What the ISO/IEC 27001 doesn’t cover: None
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications: NHS Digital Data Security and Protection Toolkit

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: Cyber Essentials, NHS Digital Data Security and Protection Toolkit
• Information security policies and processes: Genesis currently conforms with industry standards of information security good practice, including ISO/IEC 27001 Information Security Management System. Genesis is hosted on AWS who are ISO/IEC 27001:2013 accredited.; ; Genesis have robust reporting policies and processes approved by the board of directors and actioned by the Senior Leadership team led by the CTO.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: N/A
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Genesis utilizes continuous monitoring and automated scanning, employing AWS tools like Security Hub, Guard Duty, and Inspector, as well as third-party solutions, for regular vulnerability scans and real-time risk assessments. Critical patches are deployed within 24 hours, with other updates scheduled to minimize service disruption. Patch management is streamlined through CI/CD pipelines. Genesis sources its threat intelligence from AWS advisories, security bulletins, and collaborations with external security experts to keep abreast of emerging threats and best practices.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: AWS continuous security monitoring tools are employed to promptly identify potential compromises. Upon detecting any suspicious activity, the incident response team is alerted immediately, and initiate predefined protocols per the incident response framework to investigate and mitigate the issue. Response to incidents typically begins within minutes of detection, ensuring rapid containment and resolution.
• Incident management type: Supplier-defined controls
• Incident management approach: Robust, predefined processes are in place for managing common incidents, ensuring a systematic and efficient response to various types of events. Users can report incidents through the dedicated support email or directly via the helpdesk portal, which are monitored 24/7. Post-incident, detailed reports can be provided that include an incident overview, actions taken, and measures implemented to prevent future occurrences.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  • Genesis is ISO 9001:2015 certified and uses the standard to demonstrate the ability to consistently provide products & services that meet customer and regulatory requirements. Using the standard helps Genesis to organise processes, improve the efficiency of processes, and continuous on-going quality improvement. Genesis is also certified in and/or follows the guidelines of IT & Data Security standards such as Cyber Essentials Plus & ISO 27001.; • Environmental; o Paper Reduction – Genesis has significantly reduced the use of paper throughout the organisation. All processes and workflows across all functions, both internal & customer facing, in the organisation have become fully digitised and integrated.; o Responsible disposal of IT equipment – As and when the need arises, Genesis has guidelines & policies in place regarding permanent equipment disposal to ensure it is carried correctly for both Genesis and the environment.; o Remote Working Model; o Amazon Web Services (AWS);  Sustainability in the Cloud – Genesis utilises the AWS Cloud for the delivery of their platform to users & stakeholders. Their approach is to continuously use services & tools to reduce idle resources and maximise utilisation. Starting a few years ago, Genesis adopted a serverless, event-driven architecture to maximise overall resource utilisation, and remove the need to run and maintain server environments. This architectural approach continues to be applied as the Genesis technology evolves.;  Sustainability of the Cloud – AWS is focused on efficiency & continuous innovation across their global infrastructure, as they continue their path to powering their operations with 100% renewable energy by 2025.; • Genesis has policies & procedures in place across HR, Finance, Software Delivery, IT Operations, IT & Data Security, Training & Support, and Professional Services that are regularly reviewed and kept up to date. All policies are maintained in a policy register.

  Equal opportunity

  Currently Genesis employs a diverse workforce from the England, Scotland, Wales, Ireland, USA & Romania. The make up of our employees come from South Asia, European, North American; and Eastern European ethnic back grounds. 35% of Genesis employees are female – Target by 2024 > 35%; Genesis employees range from 18 – 65 years old; ; Genesis does not have a Gender pay gap, we pay the same salary for all employees in a specific roll with similar experience irrespective of gender.; ; Genesis staff are all highly skilled are paid a competitive market salary with the ability to enhance income by hitting performance bonuses, this enables our staff to build wealth and security. Genesis pays in excess of the national average wage to all employee; ; Genesis provides above average pension contributions along with other benefits that promote a healthy lifestyle like health insurance, financial advice and long-term sickness & death in service benefits.; ; Genesis has a development programme providing training and education to fill the qualification gaps that our employees may have. We have the Genesis University program to upskill and further develop our employees to align to market needs. Staff; training is funded by Genesis, if deemed relevant, suitable and necessary to perform the roll. An example of this is Prince 2 Practitioner training for our team of Project Managers.; ; Maternity leave As part of Genesis’s staff handbook the terms for maternity leave are clearly documented and a number of our employees have benefitted from paternity leave.; ; Genesis also has a flexible working policy to allow parents flexibility whilst caring for dependents.; ; Competitive salaries - Salary reviews are carried out annually to assess market competitiveness and reward employee effort. Bonus plans and commissions are in place across the business along; with the ability to own shares.

  Wellbeing

  Genesis provide healthcare cover for all employees including mental health cover.; ; Genesis have a work from home policy to allow employees to cater for child care and other commitments.

Pricing

• Price: £53,500 to £78,500 a licence a year
• Discount for educational organisations: Yes
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@genesisahc.com. Tell them what format you need. It will help if you say what assistive technology you use.