GOODHABITZ UK LTD

GoodHabitz

Online digital learning courses for organisations wanting to promote a learning culture and professional development for their staff. Localised, multi-lingual courses available internationally.

Features

• Assessments
• Tailored coaching
• Bite-size training
• Competancy-based
• Smooth LMS Integration
• Localised in 20 languages
• Detailed reporting
• One price for all
• ISO27001
• Remote Access

Benefits

• Achieve self-insight on strengths and weaknesses.
• Everyone can learn, regardless of role or location.
• Peer to peer learning supported with team workouts.
• Coach support for HR leaders.
• Access via LMS or weblink.
• Support your staff in their personal development.
• Manage organisational engagement from personalised dashboard.
• Access a resource library to support learning campaigns.

£6,199 to £93,205 a transaction a year

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at markthompson@goodhabitz.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

112022415181740

Contact

Mark Thompson
0203 871 2915
markthompson@goodhabitz.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: No.
• System requirements:
  • GoodHabitz licences
  • Internet connection
  • Up-to-date browser

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Varying based on impact level between 4 hours and 2 working days
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: No
• Support levels: There are 4 different levels, these relate to urgency. ; There are no additional costs, technical support is included in the licence. There is no specific technical account manager, but depending on the level of detail of the issue, the engineers needed to resolve the issue will be recruited internally. Details can be found in the SLA.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: GoodHabitz provides all the necessary documentation to successfully implement Personal Development into your organisation. All customers gain access to a Getting Started with GoodHabitz course – which provides advice on how to launch and how to make learning a success longer term. All customers can use the GoodHabitz platform to track important usage data via dashboarding that features as standard. Academy and Enterprise Customers gain access to Customer Success Support and an Internal Learner Marketing tool that helps you launch in the most impactful way. Enterprise customers receive full IT support for bespoke integrations into your internal LMS / LXP learning environments.
• Service documentation: Yes
• Documentation formats: HTML
• End-of-contract data extraction: Through the normal export functionality
• End-of-contract process: Customers are notified that access to the learning platform will be terminated on date "x". ; There is then still a period (default 12 months) for end users to download their certificates. ; After this period, all data is irrevocably deleted. ; There are no extra costs.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: An app is available in which content is tailored for mobile devices
• Service interface: Yes
• User support accessibility: WCAG 2.1 A
• Description of service interface: An overview of available training courses and assessments is provided. A self-scan can also be done to see what training courses are most applicable to the user. Personal account can be accessed for personal details, progress and certificates.
• Accessibility standards: WCAG 2.1 A
• Accessibility testing: We have a full UX department dedicated to this full-time. Part of this is testing done with customers on how they experience things and what could be better.
• API: Yes
• What users can and can't do using the API: A connection must be made between the LMS and the GoodHabitz platform. Changes from the user are not possible in this from GoodHabitz perspective.
• API documentation: Yes
• API documentation formats: PDF
• API sandbox or test environment: Yes
• Customisation available: No

Scaling

• Independence of resources: Elastic cloud solution including load balancing.

Analytics

• Service usage metrics: Yes
• Metrics types: There is one or more reporter roles that have access to the metrics. They can see the use of the platform by the end users.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: There is an export functionality in the profile on the "My GH" page.
• Data export formats: CSV
• Data import formats: Other
• Other data import formats: No upload

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • Legacy SSL and TLS (under version 1.2)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: 99,6% uptime is guaranteed.
• Approach to resilience: Available on request
• Outage reporting: A public dashboard

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: These are restricted to authorized personnel only, typically administrators. Access control mechanisms such as role-based access control (RBAC) and user permissions are employed to limit access to specific functionalities based on job roles and responsibilities. Access to support channels is typically provided to users seeking assistance with technical issues, inquiries, or feedback. These channels are staffed by trained support personnel who are equipped to address user concerns promptly and effectively. Access to these channels may be restricted to authenticated users.
• Access restriction testing frequency: At least once a year
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Brand Compliance
• ISO/IEC 27001 accreditation date: 14/5/2019
• What the ISO/IEC 27001 doesn’t cover: There are no exclusions
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications: ISO 27701

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: We follow the ISO 27001 framework

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: There is a change review board in place. A proposal is assessed for necessity, security, privacy, etc. ; A test period is then run with the intended solution and if the result is positive, it will be definitively implemented.
• Vulnerability management type: Undisclosed
• Vulnerability management approach: A specialist tool is used to check for vulnerabilities. If there are medium or high vulnerabilities, they are pushed to a platform for engineers. ; These must implement mitigating measures and check whether the vulnerability has been fixed. Turnaround times vary according to the severity of vulnerability.
• Protective monitoring type: Undisclosed
• Protective monitoring approach: Available upon request.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: Internally, we have a management system in which incidents can be reported. In this, legal and compliance officers look at necessary measures and communication. The specialists provide mitigating measures and legal and compliance check the effectiveness over time.; Externally, people can make reports via e-mail and/or telephone. These are then entered into a ticket system to be resolved and to keep the reporter informed of progress .

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Tackling economic inequality

  Our courses are designed to be interesting and useful to anyone and everyone regardless of their education, background, financial status or employment level.

  Equal opportunity

  Our vision is that everyone should have the chance to improve themselves and for personal development. We do not sell licenses, we sell to whole organisations to ensure that whatever level a person works at, they still can have access to online learning.

  Wellbeing

  Our library contains many courses directly related to personal wellbeing eg: Mindfullness, Kicking Social Media, Bye Bye Burnout, The Power of Sleep.

Pricing

• Price: £6,199 to £93,205 a transaction a year
• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: 14 day trial - we provide all courses, all assessments, all learning activities and the GoodScan - available in all languages.
• Link to free trial: https://goodhabitz.com/en-gb/request-trial

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at markthompson@goodhabitz.com. Tell them what format you need. It will help if you say what assistive technology you use.