Skip to main content

Help us improve the Digital Marketplace - send your feedback

VERSEONE GROUP LTD

VerseOne Content Management Solution (CMS + DXP) for Healthcare

VerseOne DXP is a market-leading digital transformation solution for the NHS, and provides intuitive AI-enhanced editing and search, unprecedented design control, one-click multi-site publishing, best-in-class security, process automation and end-to-end integration empowering healthcare organisations, and their staff, to build beautiful, value for money, personalised experiences through websites, intranets, and self-service-portals.

Features

  • Highly flexible design, content review, workflow and personalised features
  • Intuitive fully WYSIWYG editing experience with design led layout options
  • Create structured content eaily and re-use and publish anywhere
  • Publish to multiple digital channels, mobile/responsive is standard
  • Supports content authors to prevent Accessibilty issues
  • Comprehensive content scheduling and lifecycle management
  • Audit trail, version control, track changes, dual panel previeing
  • Productivity features for content authors, task lists, reminders
  • Approval and publishing workflow: simple, powerful, easy set up
  • Agentic AI-enhanced editing and content searching

Benefits

  • Market leading procesess/solutions to build websites, intranets and portals
  • Website visitors can access your website from any device
  • Benefit from maximum uptime and resilience on our cloud infrstructure
  • Easily comply with and maintain, accessibiilty standards (WCAG AA)
  • Reduce costs through enterprise licencing and improve user engagement
  • Build and re-use structured content in any channel saving time
  • Improve governance and GDPR compliance with workflow and permissions
  • Easily share content between website, intranet, portal and social media
  • Security focus provides peace of mind for GDPR & service-availability
  • Unified platform, automates, personalises and integrates reducing complexity and cost

Pricing

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@verseone.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

1 6 1 9 9 8 6 7 8 9 2 7 3 2 6

Contact

VERSEONE GROUP LTD Customer Success Team
Telephone: 01483961208
Email: info@verseone.com

About your service

Service categories

Applications

Content workflow and management

  • Creative

Content services

  • Enterprise Content Management Applications
  • Content Sharing and Collaboration Applications

Persuasive content management

  • Website Software
  • Digital Asset Management Applications
  • Product Content Management Applications

Enterprise portals and digital workspaces

  • Multi-Audience Portals
  • Integrated Employee Workspaces
Multi cloud support
No

Service scope

Software add-on or extension
No
Cloud deployment model
Private cloud
Service constraints
Planned maintenance and in-version upgrades are included with all service levels.

Active Directory Single Sign-on through ADFS can be hosted in the dedicated private cloud environment.

Internet Explorer is no longer supported.
System requirements
  • VerseOne CMS Editors require a modern browser such as...
  • Microsoft Edge (45+)
  • Chrome (105+)
  • Firefox (110+)
  • Safari (14+)
  • Any modern browser, i.e. released in the last 2 years

User support

Email or online ticketing support
Yes
Support response times
All customers are supported in line with a Service Level Agreement. The support service includes a full fault diagnosis and error correction service for all of the applications delivered for the duration of the agreement. Support is available Monday to Friday 09:00 – 17:30 (excluding UK Bank Holidays):

P1: Target response 30 mins — Time to resolve 4 hours
P2: Target response 30 mins — Time to resolve 1 day
P3: Target response 30 mins — Time to resolve 5 days
P4: Target response 30 mins — Time to resolve 10 days.

See Service Definition document for more.
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
WCAG 2.2 AA
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
Yes
Web chat support availability
9 to 5 (UK time), Monday to Friday
Web chat support accessibility standard
WCAG 2.2 AA
Web chat accessibility testing
VerseOne prides itself on an in-depth knowledge of all aspects of accessibility with regard to design, implementation, content management, and web software design.

VerseOne's experienced Web Accessibility auditor will use adaptive technology, where relevant, to test our sites and software to WCAG AA Level (at least), including for users with: no vision, low vision, colour blindness, dyslexia, deafness, mobility impairment, and learning difficulties.
Onsite support
Yes, at extra cost
Support levels
All customers are supported in line with a Service Level Agreement. We provide a single, consistently good level of service, which is appropriate to meet the 99.9% uptime commitment in the SLA.

The support service includes a full fault diagnosis and error correction service for all of the applications delivered for the duration of the agreement. Support is available Monday to Friday 09:00–17:30 (excluding UK Bank Holidays):

P1: Target response 30 mins—time to resolve .5day;
P2: Target response 30 mins—time to resolve 1 day;
P3: Target response 30 mins—time to resolve 5 days;
P4: Target response 30 mins—time to resolve 10 days.

As part of our G-Cloud service, we provide an uptime of 99.9% for all the websites you publish from VerseOne. Any issue that affects this is a P1, and is dealt with on a 24/7/365 basis.

Support is provided within the SAAS cost. We provide support to the same high standard for each of the licence levels.

We allocate an engineer to each issue and they stay with it until resolution.
Support available to third parties
No
AI chatbot
No

Onboarding and offboarding

Getting started
In addition to our great solution, VerseOne offers support and guidance throughout journey based on our ISO accredited implementation methodology. We offer a wide range of professional services including, stakeholder workshops, user journey mapping, creative and digital design services, project management and training.
VerseOne provides a wide variety of training courses, including ‘Train the Trainer’, to empower users with tools and knowledge to enhance the deployment of their complete web solution. Each course is carefully designed to address your specific content management needs as well as support software users of all skill levels and access permissions.
The training would be tailored to your website and/or intranet requirements, concentrating particularly on document management and content editing, as well as how to modify the look and feel of the site.
Service documentation
Yes
Documentation formats
  • HTML
  • PDF
  • Other
Other documentation formats
Online e-Learning
End-of-contract data extraction
At the end of the contract, VerseOne can provide an extract of the database, and all media held in the CMS. Alternatively, users can download assets (documents, images, video, audio, etc) from within the CMS.

VerseOne CMS has an advanced content search in the interface, which supports building up Boolean search phrases for searching and filtering by attributes including (but not limited to): Content type, Content and individual content fields, Headline, Author, Date created, Date modified, Filename, Categories, Status, Metadata.

All items can be exported as a CSV.
End-of-contract process
As well as empowering customers to off-board at their own pace in the ways previously described, VerseOne can also provide bundled resources, e.g. a SQL file, and zip of all media resources. These options are included within the standard contract at no extra cost.

If any other formats than those described are required, then these would be chargeable extras.
Documentation accessibility standard
WCAG 2.2 AA

Using the service

Web browser interface
Yes
Supported browsers
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
Application to install
No
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
Desktop service “mobile first”, responsive web design (RWD) and progressive enhancement principles have been part of VerseOne's DNA since 2010.

Websites, intranets and portals built and maintained through VerseOne DXP are always designed to be fully mobile responsive out of the box, to support mobile, tablet and desktop devices.

VerseOne DXP is a powerful, enterprise-level DXP and whilst it can be used on a mobile phone, the user interface is optimised for desktop and tablet use. VerseOne continue to improve the experience on mobile devices, and these are rolled out in the seamless, free of charge upgrades.
Service interface
Yes
User support accessibility
WCAG 2.2 AAA
Description of service interface
The VerseOne DXP is primarily a browser-based web CMS. It enables you to build, publish and manage multiple websites.

Build and maintenance of websites, intranets, portals and other line of business systems is primarily through the intuitive, browser-based graphical user interface (GUI).

An full service (read / write for all objects) Application Programming Interface (API) is also available, based on RESTful JSON Open Standards, with standardised authentication protocols.
Accessibility standards
WCAG 2.2 AA
Accessibility testing
One of the founding principles of VerseOne was to champion the Accessible web design, and VerseOne prides itself on an in-depth knowledge of all aspects of accessibility with regard to design, implementation, content management, and web software design. VerseOne's experienced Web Accessibility auditor will use adaptive technology, where relevant, to test our sites and software to WCAG AA Level (at least), including for users with: no vision, low vision, colour blindness, dyslexia, deafness, mobility impairment, and learning difficulties.
API
Yes
What users can and can't do using the API
The API is separately licensed, and provides full control over all objects within the VerseOne DXP.

The API provides a full read / write service for all objects, through Open Standards compliant RESTful JSON protocols, and standardised authentication credentials.
API documentation
Yes
API documentation formats
Open API (also known as Swagger)
API sandbox or test environment
Yes
Customisation available
Yes
Description of customisation
The VerseOne DXP is an entirely browser-based web CMS. It enables you to build, publish and manage multiple websites of every variety.

In a few days, users with HTML and CSS skills can learn to build websites based on structured content types, and VerseOne DXP's unique Dynamic Page Layout Engine—which enables permitted users to manage the content on every area of a Page.

All aspects of the website can then be managed. This includes creation or amendment of pages, upload of content, media and documents, metadata and site structure control. In fact, anything that can be done in a manually built website can be managed more easily in VerseOne DXP.

VerseOne DXP allows trained users to add re-usable styling classes to Content Items, individual Pages, or even to whole Websites—so that users without CSS or HTML knowledge can still take advantage of the designed features.

Users can Publish and Un-publish content (and even pre-schedule Publishing events), undertake content governance and reporting, and manage metadata.

Multiple websites can be supported in a VerseOne DXP instance, with unlimited microsites and URLs.

Subject to their permissions, any authorised user can work in the DXP.

Scaling

Independence of resources
VerseOne customer solutions are all hosted within our private Azure Managed Cloud Services environment. This provides fully load-balanced multi-server multi-cluster environments, protected by load-balanced Web Application Firewalls.

Databases are also load-balanced and monitored 24x7x365, with dynamic management to ensure that high load does not affect any other customers.

In other words, VerseOne's Managed Cloud Services environment can scale both horizontally and vertically, ensuring that our customers business-critical sites remain fast and responsive at all times.

Analytics

Service usage metrics
Yes
Metrics types
VerseOne DXP captures certain metrics, such as total Content Item hits by date, and document download statistics. As standard, VerseOne DXP displays top Pages (by hits) and the most popular Forms (by number of completions) in the Dashboard.

The Advanced Search can report on the most popular content items across the system, as well as gaining insight into user registrations and monthly active users (MAU) for portals.

VerseOne Report Studio Pro can be purchased to provide even greater interrogation of data and statistics.

Additionally, VerseOne DXP can be easily integrated with Google Analytics, to provide real-time analytical reporting.
Reporting types
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request
Resource tagging
Yes
FOCUS resource tagging
Yes

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Other security clearance
Government security clearance
Baseline Personnel Security Standard (BPSS)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
United Kingdom
User control over data storage and processing locations
No
Datacentre security standards
Managed by a third party
Penetration testing frequency
At least once a year
Penetration testing approach
‘IT Health Check’ performed by a CREST-approved service provider
Protecting data at rest
  • Physical access control, complying with another standard
  • Encryption of all physical media
Data sanitisation process
Yes
Equipment disposal approach
A third-party destruction service
Data sanitisation type
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

Data export approach
At the end of the contract, VerseOne can provide an extract of the database, and all media held in the DXP. Alternatively, users can download assets (documents, images, video, audio, etc) from within the DXP.

VerseOne DXP has an advanced content search in the interface, which supports building up Boolean search phrases for searching and filtering by attributes including (but not limited to): Content type, Content and individual content fields, Headline, Author, Date created, Date modified, Filename, Categories, Status, Metadata.

All items can be exported as a CSV.
Data export formats
  • CSV
  • Other
Other data export formats
SQL dump
Data import formats
CSV

Data-in-transit protection

Data protection between buyer and supplier networks
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
Data protection within supplier network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

Guaranteed availability
VerseOne's hosting partner is Microsoft Azure and offers 99.99% guaranteed network uptime. VerseOne offers 99.99% server uptime, and 99.99% application uptime (excepting scheduled maintenance). Any refunds would usually be as credits against other VerseOne Group services.
Approach to resilience
In line with VerseOne’s commitment to quality and customer satisfaction across all of its products and services, VerseOne partners with one Microsoft Azure to provision its own environment within the Azures Public Cloud.

This secure solution is a private environment comprised of its own firewall, load balancers and virtual machines all built on Microsoft state-of-the-art resilient infrastructure guaranteeing 99.9% uptime.

Public clouds offer vital advantages for reliable hosting, which are passed on to all VerseOne customers:

Virtualised environments — Virtual servers are more cost-effective to configure and maintain, making value-for-money dedicated environments accessible even to limited hosting budgets.

Load balancing — Load balancing helps support speedy loading times for your website or intranet by evening out traffic spikes.

Robust fail-over — A part of the environment is set aside for fail-over, so that if the server where your website or intranet is located becomes unavailable, traffic is routed to a new location, maintaining high uptime for your site.

Further details are available on request.
Outage reporting
VerseOne uses an internal tool for proactive site and application management. Application and site health is monitored through a dashboard and outages are displayed on a screen within the office, and key staff are simultaneously alerted through email.

For any significant outage, VerseOne will pro-actively contact customers.

Identity and authentication

User authentication needed
Yes
User authentication
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
Access restrictions in management interfaces and support channels
Within VerseOne DXP, users must login. Usernames and passwords are salted encrypted—using test practice algorithms.

VerseOne DXP uses "secure by design" best practice principles. Restrictions are based on defined user policies, based on role-based Permission Groups. Permissions are based on a "secure by design" model, in which Protected Content is hidden unless the user is given explicit access through the DXP management panel.

Any other management interfaces and support channels require user login, and are governed by their own security policies.
Access restriction testing frequency
At least every 6 months
Management access authentication
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
At least 12 months
Access to supplier activity audit information
Users have access to real-time audit information
How long supplier audit data is stored for
At least 12 months
How long system logs are stored for
At least 12 months

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
ISO/IEC 27001
Information security policies and processes
All information security policies and processes are documented as part of our ISO27001 and ISO9001 accreditations.

VerseOne's Chief Product & Compliance Officer has responsibility for security policies which are internally audited as part of our compliance audit schedule. VerseOne's Chief Product & Compliance Officer reports directly to the VerseOne Board and reports any security and compliance issues.

In line with VerseOne's ISO processes, all staff receive a set of standard training sessions at the point they are recruited, and this includes secure work practices; in addition, they are required to read and sign VerseOne's Data Protection and Security Policies, and adherence to these policies is a condition of the contract of employment. In addition, VerseOne staff receive annual refresher training.

As a company we are registered with the Information Commissioner's Office. Where an issue requires escalation, we have a set of identified processes as part of our critical incident process.

One of the key advantages of working with VerseOne is that we keep the barriers to communication as low as possible—commensurate with delivering services efficiently to our whole client base.
Software Security Code of Practice
Yes

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
The components of our services — project deployments, infrastructure changes, and product development — are tracked through their lifetime: this is generally managed through our Service Desk solution (in this case, Jira Service Desk and Jira Response Management).
All changes are assessed for potential security impact, and discussed and agreed by either the Product Board or Security & Infrastructure Change Board.
Vulnerability management type
Supplier-defined controls
Vulnerability management approach
We assess potential threats through proactive monitoring of logs and security advisories from major partners/suppliers in the security sector.

Customers also regularly carry out Penetration Tests on their VerseOne CMS instances. Any issues are carefully assessed by the VerseOne Technical team, and patches are rolled out to all customer instances.

We can deploy patches in minutes, but we would assess the risk posed by the particular vulnerability and decide the most appropriate schedule. Typically patches are applied monthly.
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
If we find a potential compromise as part of our ISO 9001 or 27001 processes or, in the case of product development, OWASP management, our incident management process would be triggered.

From that point, the speed of response would be agreed between the engineers and the incident manager—but any incident is typically categorised as an "all hands" P1 support issue, escalated to the Chief Technical Officer and, if required, to the Executive Board. Generally, incidents are resolved in less than 24 hours.
Incident management type
Supplier-defined controls
Incident management approach
The majority of incidents are handled through the supportdesk. This streamlines incident management, tracking and resolution. Supportive questions help us gather essential information. Users rate the severity via impact on their business processes.

For critical incidents, on-duty incident managers assess the situation and any affected customer(s), and create a communication list for the incident.

They will:
• instigate conference calls
• document a high-level view of problems
• ensure resolution of the issue within SLA
• be involved in the debrief
• provide incident reports on resolution

All communications are available within the service desk portal.
Post-quantum cryptography secure
Yes

Secure development

Approach to secure software development best practice
Conforms to a recognised standard, but self-assessed

Public sector networks

Connection to public sector networks
No

Pricing

Discount for educational organisations
No
Free trial available
No

Discount percentage by annual call-off contract value (excluding VAT)

Less than £250,000
0%
Between £250,000 and £500,000
5%
Between £500,001 and £1,000,000
10%
Between £1,000,001 and £2,500,000
15%
Between £2,500,001 and £5,000,000
20%
Over £5,000,001
25%

Non-mandatory Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
Certified Quality Systems
ISO/IEC 27001 accreditation date
Wednesday 17 July 2024
What the ISO/IEC 27001 doesn’t cover
NA. All VerseOne services and software were included in the scope.
ISO 28000:2022 certification
No
ISO 9001 certification
Yes
Who accredited the ISO 9001 certification
Certified Quality Systems
ISO 9001 accreditation date
Tuesday 22 April 2025
What the ISO 9001 doesn’t cover
NA. All VerseOne services and software were included in the scope.
Quality management systems (QMS)
No
CSA STAR certification
No
PCI certification
No
Cyber essentials
Yes
Please provide your Cyber Essentials Certificate Number
Ddb40f97-96e8-4a94-89fa-c7465d67de41
Cyber essentials plus
No
Cyber Essentials Alternative
None of the criteria
Other security certifications
No

Social value

Section B - Commitment for Future: Delivery
  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations
    • Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)
    • Measures to engage users and communities and build relationships to increase community integration build trust and influence how the contract is delivered
  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
    • Creation of employment opportunities particularly for those who face barriers to employment, such as prison leavers, care leavers and/or who are located in deprived areas, and for people in industries with known skills shortages or in high growth sectors
  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Other measures to offer development opportunities for the target cohort(s) in the contract workforce
    • Creation of outreach activities to create a pipeline of employees for the future contract delivery
  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@verseone.com. Tell them what format you need. It will help if you say what assistive technology you use.