Aire Logic Limited

AireGlu - Integration Engine

AireGlu is a modern HyperRAD integration that delivers clean abstraction between applications and the services it integrates with. The product also supports iterative and rapid development detached from the cadences of release cycles. Founded in healthcare AireGlu has versioning and integration tooling for working with HL7v2, FHIR, Spine and MESH

Features

• HyperRAD integration engine
• Flexible mapping - transform data in many ways
• Extensive behaviours to facilitate any integration scenario
• Multiple environments Staging and Production environments for all endpoints
• Versioning of endpoints for safe deployment
• Drag-and-drop easy to use mapping interface
• Full endpoint testing
• Out-of-the-box or custom storage options
• Strong healthcare functionality for handling FHIR, HL7v2, Spine and MESH
• Flexible Low-code/No-code configuration

Benefits

• Facilitate any integration scenario
• Create endpoints for HTTP requests, messaging, or send email/SMS
• Flexibility, define output data from JSONPath, to custom Javascript functions
• Confidence in mappings using intuitive endpoint testing functionality
• Strong versioning workflow to safely deploy endpoints into multiple environments
• Simple mapping scenarios, drop data properties directly into your output
• Customise for your own organisation's needs

£2,000 a licence a year

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at procurement@airelogic.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

133777165536834

Contact

Mike Odling-Smee
+44 (0)7946 51274
procurement@airelogic.com

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: AireGlu supports the integration and interoperabiltiy of any number of systems that need to share data, empowering connectivity and information sharing
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud
• Service constraints: There are no constraints in running the service
• System requirements:
  • Browser-based and accessible using any modern browser
  • Chrome, Edge, Safari, Firefox. No browser extensions are required
  • On prem & cloud hosting available

User support

• Email or online ticketing support: Yes, at extra cost
• Support response times: Support is banded into service level agreements. Some services can choose to have little support and some stronger support. The level of support selected by the customer determines whether it is free or chargeable. ; ; Our response times are within 2 hours for urgent requirements, to 3-4 days for low priority requirements depending on the service level the customer has selected. ; ; We do provide weekend support, but this does fall into one of the chargeable models
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Bronze: email support, submission stats, 8 hour SLA; Silver: email and phone support, submission stats, 6 hour SLA; Gold: email and phone support, submission stats, 4 hour SLA and advice; Platinum: 24/7 emergency phone support, core hours email support, submission stats and advice
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We deliver initial workshops to support business analysis of the endpoints and interoperability needs the organisation has.; ; We will then work with the local team to configure the platform to the local need, ensuring effective knowledge transfer during this process so the local team can manage ongoing maintenance effectively. We then provide testing support and guidance ready from release into the production environment. We also provide on-site and online training as required for local staff to be able to manage new requirements or as refresher training if required. We support all our customers with ongoing account management to ensure the platform continues to meet their needs.
• Service documentation: Yes
• Documentation formats: HTML
• End-of-contract data extraction: Configuration export
• End-of-contract process: On request, Aire Logic can export the configuration in JSON and YAML format

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: WCAG 2.1 AA or EN 301 549
• Description of service interface: Authorised users can self-administer the configuration settings for their organisation and their local integration needs
• Accessibility standards: WCAG 2.1 A
• Accessibility testing: We have used both online and offline accessibility testing tools and have installed local accessibility tools on developer workstations.
• API: Yes
• What users can and can't do using the API: There are a number of APIs across our platform, which allow you to programatically access functionality within each service. The APIs are secure by design, and follow RESTful principles. There are also GraphQL APIs which allow you to fetch discrete data points using selective querying.; ; APIs can be used to access available forms, query data collected through forms, retrieve lists of workflow tasks and create new patient records. It is not possible to delete patient data through the APIs, you are able to withdraw information, but it cannot be permanently delete for audit purposes.; ; APIs documentation is made available dynamically through OpenAPI specifications, and product specific documentation sites. These sources detail the extensive capabilities of individual API methods, and their respective interfaces.
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Users can define output data using JSONPath, XPath, XSLT and custom Javascript functions. In addition users can create any endpoint to facilitate HTTP requests, use messaging, or send email/SMS and store endpoint definition in custom storage

Scaling

• Independence of resources: Segregated resources (docker containers)

Analytics

• Service usage metrics: Yes
• Metrics types: Aire Logic are happy to provide service usage metrics that are agreed at the start of the contract
• Reporting types:
  • API access
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest: Physical access control, complying with another standard
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: In-house destruction process

Data importing and exporting

• Data export approach: Database extract
• Data export formats: Other
• Other data export formats: JSON
• Data import formats: Other
• Other data import formats: JSON

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: 99.9%
• Approach to resilience: Available on request
• Outage reporting: Email alerts and public dashboard

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Limited access network (for example PSN)
  • Username or password
• Access restrictions in management interfaces and support channels: Role Base Access Controls
• Access restriction testing frequency: At least every 6 months
• Management access authentication: 2-factor authentication

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: BSI Assurance UK
• ISO/IEC 27001 accreditation date: 09/10/2023
• What the ISO/IEC 27001 doesn’t cover: Outsourced Development - No development is outsourced, it is all done inhouse.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications: Data Protection and Security Toolkit (NHS England)

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: We are Data Protection and Security accredited with NHS England and Cyber Essential approved.
• Information security policies and processes: We follow the requirements of the Data Protection and Security Toolkit and Cyber Essentials. We are compliant with ISO 27001. We have a Clinical Safety Officer to ensure Clinical safety in the deployment of the application in healthcare settings All staff are required to attend an information security (and GDPR) session and read our information security guidelines

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: All build and configuration assets are version controlled (using git). All changes are peer reviewed by at least two others before being merged into the codebase (or configuration).
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: We do in-house penetration testing. Any critical vulnerabilities should be patched within 24 hours.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Pro-active log monitoring
• Incident management type: Undisclosed
• Incident management approach: User's can email or phone with incidents. We use an incident management tool (Zendesk) that has built-in reporting.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: Yes
• Connected networks:
  • NHS Network (N3)
  • Health and Social Care Network (HSCN)

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  An exclusively tech4good business, we’ve been committed to ethical business practices since inception. Certified in ISO26000 for Social Responsibility and ISO14001 for Environmental management, robust environmental sustainability policies and practices ensure Corporate Social Responsibility is central to our operations.; ; We’re committed to achieving net zero emissions by 2030 with a published Carbon Reduction Plan. Our Environmental Management System Committee drives robust mitigation efforts and organisational accountability for ambitious targets. Activities include: training/education events, internal/supplier audits, community engagement, accreditation, environmental volunteering and focus on mindset shifts through 'conscientious coding and design’.; ; As a business we’ve:; •Switched to 100% renewable electricity for our offices, reducing our carbon footprint by ~50% in 2023; •Invested in Ripple Energy solar park to mitigate 50% of predicted office CO2e for next 40yrs; •Allocated equivalent investment in future Ripple windfarm to mitigate remaining 50%; •Switched to greener suppliers with net zero carbon commitments; •Conduct regular office audits of waste management, recycling, water use etc.; •Changed Travel Expenses policy to prioritise environmental impact ; ; We’ll reduce environmental impacts of GCloud contracts through: ; •Helping customers source the most energy efficient cloud hosting; serverless architecture; green (100% renewable) cloud hosting; or data centres complying with HMG’s Climate Change agreements; •Conducting environmental impact assessments for each delivery, including lifecycle assessments to evaluate long-term direct (e.g. energy consumption) & indirect (e.g. supply chain emissions) impacts; •Ensuring GHG emissions are forefront in design decisions; •Environmental awareness sessions & stakeholder workshops; •Providing volunteering opportunities for direct environmental improvement, awareness & CO2 reduction e.g. tree planting/pruning, woodland management, rewilding, community food growing; •Relationship with Ahead Partnership supporting their Green IT challenge and the next generation of our workforce; •Development of green spaces under the NHS Forest Scheme; •Investment in environmental community schemes involving forest/woodland offsetting, mitigating emissions of contract staff; •Annual charitable donations to environmental charities.

  Covid-19 recovery

  When COVID-19 hit the UK, Aire Logic offered pro bono services to NHS Trusts nationwide. Today, we remain committed to supporting staff & communities post-COVID-19 through multiple initiatives. Anchored in Tech4Good principles, we adjusted our support for the hardest hit, including small businesses and local communities, incorporating ISO26000 (Social Responsibility) principles into our operations. Our goal is to amplify our reach, foster community connections, and bolster support for healthcare entities. Our commitment includes the following initiatives and are reflected in our high BCorp score of 117.4. ; Retraining/Employment Opportunities: We provide job opportunities for groups disproportionately impacted by COVID-19, e.g. 16–24-year-olds & ethnic minorities through: CodeYourFuture partnership, supporting disadvantaged individuals into software careers; Digital Access West Yorkshire collaboration for tech refurbishment, bolstering digital inclusion; Generation collaboration, providing training to unemployed young individuals in Leeds. ; Support for Businesses/Communities: Assisting Leeds Teaching Hospital in devising alternative pre-op assessment system with Forms4Health, enhancing patient safety & clinician efficiency. ; Innovative Projects for Anchor Institutions: ; - Working with Leeds Hospitals and CAILTEC to enhance same-day emergency care via technology; - Collaborating with Professor Celia Glass (Cass Business School) on improved e-rostering for NHS staff. ; Employee Support:; -Prioritising the physical and mental health of employees affected by Covid-19 through: Hybrid working policy–no mandated office days; Working from home equipment allowance; Plumm - wellness provider; Weekly online yoga; Mental health survey; Virtual team socials; Introduced 2 wellbeing days per year; Offered interest-free loan scheme to impacted staff. ; -Enhancing workplace conditions for a safe post-COVID-19 recovery. ; -Ongoing offer of interest free loans for employees struggling with cost of living or other short term financial stress.

  Tackling economic inequality

  Aire Logic is committed to addressing employment, skills, and pay disparities through workforce initiatives. We create employment and training opportunities for those facing barriers in deprived areas, addressing skill shortages, supporting educational attainment relevant to our contracts. ISO30415 (Management of Diversity/Inclusion) principles define us. Our commitments include:; ; Workforce Inclusivity; ; -Driving innovation and challenging our Board, our Equality, Diversity, and Inclusion (EDI) Committee partners with Generation to upskill unemployed adults, enhancing job prospects and minimising pay disparities.; -We have stringent data capture/analysis mechanisms, e.g. periodic equal pay audits and pay gap analysis, ensuring fair/equal pay and equal uptake of opportunities across the workforce, preventing in-work poverty.; -As signatories of Tech Talent Charter we provide annual D&I data regarding workforce makeup, contributing to tech-industry-wide D&I efforts.; -We prioritise diversity in recruitment/onboarding processes, offering opportunities for those with disabilities/long-term health conditions. We regularly monitor/report on economic inequality through D&I surveys, publishing results on our website.; ; Economic Growth through Skills/Education; ; -We provide employment/training opportunities for individuals facing employment barriers, including T-Level Apprenticeships, degree programs, summer internships and support through study leave and financial cover. ; - We work with Ahead Partnership to engage/enable young people to achieve their full potential in Tech based roles; -We provide funding to support under-represented groups identified through diversity audits e.g. assisting non-technical female staff in retraining as Software Developers.; - We offer developmental support for career progression with Pluralsight available to all employees. We have also invested in in-house provision of staff training/upskilling, including classroom and e-learning for specific qualifications.; Economic Growth Through Entrepreneurship; -We co-sponsor Leeds Digital Healthcare, collaborating with Clinical Entrepreneurs Programme for economic growth through business creation.; -We collaborate with NorthCoders, supporting career-changers to become Software Developers. Since 2020, we welcomed 10 individuals from their Coding Camps and hired 2 through our Industry Placement scheme.

  Equal opportunity

  Aire Logic is committed to promoting career advancement for disadvantaged/minority background individuals through targeted skill development. We proactively address/mitigate modern slavery risks in our supply chain. We implemented the following initiatives to tackle inequality in the contract workforce.; ; Reducing the Disability Employment Gap; ; Our EDI Committee, HR, and Board support increasing disabled people’s presence, actively tackling inequality through surveys and awareness events, monitoring/reporting inclusivity gaps. We are increasing our proportion of disabled staff by 1% p.a. and ensure all offices are wheelchair-accessible and internal systems/products are WCAG compliant.; ; Tackling Workforce Inequality; ; -We continuously review and ensure inclusive recruitment processes, promoting fair pay/participation/progression e.g. using blind CV sifting; -Our co-founded recruitment consultancy, Brio, fosters inclusive recruitment, ensuring ethical recruitment is carried into our supply chain. ; -Our flexible working environment supports recruiting/retaining staff with caring responsibilities.; -Our policies support progression of disadvantaged/minority staff into higher-paid work: Upskilling staff through funded guilds (e.g. agile, data science), knowledge-sharing events, team away days, AireTime to explore training opportunities. Support/training is assessed by our EDI committee to ensure equality in application, identifying opportunities to improve minority representation in under-represented roles (e.g. female software engineers).; We provide Digital Skills Training for under-represented groups we support/hire as junior staff, through partnerships with charities including Code Your Future, Generation UK, Growing Talent Digital Leeds, Sky Get Into Tech.; Establishing/funding apprenticeships - We provide employment/training opportunities for individuals facing employment barriers: T-Level Apprenticeships, degree programs, internships and provide ongoing support through study leave and financial cover.; ; Our EDI Committee promotes/measures delivery of equal opportunities, including annual anonymous EDI survey reporting on protected characteristics against role/salary, reviewed by our HR team and Board, reported to Tech Talent Charter (underpinning our accreditation with the Good Business Charter).; We support relevant tech events to attract diverse candidates, sponsoring e.g. Women of Silicon Roundabout.

  Wellbeing

  Aire Logic prioritises the wellbeing of patients, the community, and staff above profit, fostering a healthy work environment and enhancing lives. Detailed assessments during our B Corp review, where we scored 117.4 overall and 63.1 in "supporting our workers," underline our commitment.; Various initiatives promote physical and mental wellbeing across the company, including:; -Flexible working, embraced by 90% of our staff, allows them to balance work and life. ; -Mental health receives dedicated attention, with 10% of our staff trained in identifying early signs of issues (FutureQuals Level 3 in Mental Health First Aid).; -Regular wellbeing check-ins, 'Duvet days', and access to professional Employee Assistance Programmes, provide support for staff. ; -Physical health is encouraged through activities like free yoga sessions, gym memberships and team sports.; -Regular social events, including with wider community to build connections and improve wellbeing; Staff have access to 12 days a year (paid) for personal development, supporting staff and community wellbeing through personal projects, charity work, and pro-bono initiatives. ; Community integration is core to our ethos, evident in collaborations with healthcare and education sectors Including:; -Collaborating with senior nurses we developed software for proactive identification of children and young people for early health related interventions, benefiting 500,000 pupils nationwide.; -We fully funded/supported the National Electronic Bed Service, used to locate mental health beds and refer young people with acute mental health needs requiring residential care.; -We completed a pro bono project for the Children’s Heart Surgery Fund to enhance the patient evaluation process through assessments for their Family Support Workers.; Our office space serves as a hub for community events and research projects. For instance, we hosted a community coding group, CodeWith, and a group of Bruntcliffe Academy students at our offices - facilitating UCD workshops and insightful Q&A sessions on tech careers.

Pricing

• Price: £2,000 a licence a year
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Free of charge Proof of Concepts are available for a limited time period - please contact us to discuss your requirements

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at procurement@airelogic.com. Tell them what format you need. It will help if you say what assistive technology you use.