Patienteer

Patienteer

Patienteer provides a unified, joined up, real-time patient coordination and analytics platform.

Founded on the principle that every patient’s care should be managed as simply and effectively as possible, Patienteer links information from multiple services to coordinate care delivery and provide accessibility and transparency to care delivery.

Features

• Visualisations for at-a-glance understanding of patient journey
• Real-time integration with clinical applications
• Real-time reporting of patient journey
• Healthcare focused task management features
• Triage and referral management features
• Configurable patient identification algorithms

Benefits

• Understand the root cause of delays at-a-glance and prioritise actions
• Coordinate care across healthcare providers
• Automatically create and send documents to clinical systems
• Manage patient care delivery across providers without a phone call
• Track and evaluate service outcomes
• system wide notifications and alerts

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at craig.burke@patienteer.co. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

174211024532076

Contact

Craig Burke
07954703633
craig.burke@patienteer.co

About your service

• Service categories:

  Application Development and Deployment

  Analytics and business intelligence

  • Business Intelligence
  • Advanced and predictive analytics
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: No service constraints
• System requirements:
  • Access to internet
  • Supported Browser (Chrome, Safari, Edge, Firefox)

User support

• Email or online ticketing support: Yes
• Support response times: Our Standard Support Model Response Times are:; Monday to Friday 24hrs: Response within 60 minutes.; Weekends: Response within 120 minutes.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), 7 days a week
• Web chat support: Yes
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: WCAG 2.2 AA
• Web chat accessibility testing: Manual testing with screen readers and keyboard navigation to ensure chat flows are perceivable, operable and understandable.
• Onsite support: Yes
• Support levels: Three levels of support are provided within our software as a service cost. We have a standard support model which includes 24hr support, ticketing system and week-day phone service. Each customer has an assigned technical account manager who actively reviews and engages with customers.; ; Tier 0 - Self-Help / User Retrieved Information: Users access information and training via our in-application tutorials or support page. The support page includes How-To documentation and blogs.; ; Tier 1 - Basic help desk resolution, service desk delivery and In-depth technical support: Basic customer issues such as solving usage problems and fulfilling service desk requests that need IT involvement.; ; Tier 2 - Expert Product Support: Technical resources available for problem resolution or new feature creation. Skilled personnel duplicate problems and define root causes, using product designs, code, or specifications. Cloud engineers are actively engaged at this level of support.
• Support available to third parties: Yes
• AI chatbot: No

Onboarding and offboarding

• Getting started: To maximise benefit of the service, Patienteer provides support in four key areas:; ; 1. Delivery of an agreed training plan. An Account Manager works with individual customers to develop a training plan specific to their healthcare organisation. This includes on-site delivery of training (or virtual if required), and on-line discussion sessions. The training plan is approved by a project implementation body (e.g. steering group).; ; 2. A representative on required project governance committees; ; 3. Online user documentation and videos accessible from within the application.; ; 4. In-application tutorials explaining the key features and flow of each interface, accessible at any point by any user.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: As part of the offboarding process a customer representative is verified as the data custodian of the data. The representative determines whether an API or sFTP service is used for data extraction.; ; If using sFTP, our customer support team provides keys and validates the customer server sFTP details. Customers confirms connection using a test file before full extract is delivered.; ; If using the API service, customer authentication details are added allowing the customer to extract data in JSON format.
• End-of-contract process: At the end of the contract data can be migrated to customer operated servers at no extra cost.; ; If customer requires data to be stored Patienteer uses consumption based pricing.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Functionality is the same between mobile and desktop. Differences relate to a landscape (desktop) vs portrait (mobile) view orientation.; Visual Level Layouts: desktop version holds more information in a view and layout is designed in horizontal dimensions. Mobile view requires vertical scrolling for same information. Desktop view uses horizontal navigation while mobile view uses vertical navigation.; ; Desktop view enables pop-ups to complete actions whilst in mobile design the interface jumps (or moves) to a new screen to complete an action.; ; Desktop enables filters to be exposed in a single view (larger screen size). In mobile view scrolling function is used.
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: The service interface provides visualisations enabling users to undertake task management within any healthcare setting. This includes the ability to understand delays at a glance, prioritise and manage tasks, update action notes related to service delivery and create new tasks or workflows. Visualisations include patient task summary views, graphical displays of sequenced tasks and list views with filters.; ; The functions, information and layout of each interface is tailored to the specific role a user is performing.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: We undertake in-house testing supported by online accessibility developer tools to align with standards. This is supported by peer review of outcomes which is overseen by a director level executive. We are committed to continually improving accessibility and is a review gateway within our software development lifecycle.
• API: Yes
• What users can and can't do using the API: APIs are used to connect to existing customer solutions and databases to automate information exchange required for decision making and to manage user authentication. To add or change the configurations of an API the customer will raise a support ticket. A dedicated account manager will then support the process which includes a review against security and GDPR requirements and updating of all customer specific documentation. This activity is part of the standard support model with no extra charge.; ; The APIs:; 1. Enable you to authenticate and authorize users from directories that are capable of presenting SAML tokens or using the OAuth 2.0 protocol.; ; 2. Enable you to integrate data from clinical systems using FHIR or HL7.; ; 3. Enable you to extract data at end of contract in JSON format.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Within each interface, the information displayed in lists or cards can be customised to the job role or current operating environments, as can the displayed filters. Users with an administrator job role can customise views directly within each interface for their organisation.; ; Individual users configure list views to display specific information.; ; Tasks and workflows (sequencing of tasks) can be customised to match the customer processes. Tags and task parameters including expected durations, default owners and task interdependencies can also be customised to user requirements. This is managed via service desk requests.; ; Logo's, icons, labels on buttons, column headers, list names can all be tailored to a Customer's requirements via a service desk request.; ; Business logic within functions can be updated to specific customer requirements via a service desk request.

Scaling

• Independence of resources: We have a modern technology stack which utilises resource isolation, Virtualization, Load Balancing, Prioritisation and Throttling. Additionally we undertake capacity planning using historical demand patterns.

Analytics

• Service usage metrics: Yes
• Metrics types: 1. Total number of users actively using the application segmented by role type.; 2. Dashboards and analytical reports showing workflow utilisation including how well source data systems are utilised.; 3. Dashboard of service status and uptime of application; 4. Bespoke reports as requested by customers
• Reporting types:
  • Real-time dashboards
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: Yes

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest: Physical access control, complying with SSAE-18 / ISAE 3402
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type: Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: Two export approaches are offered as part of the service:; 1. In application tools for data export into PDF, CSV and excel formats; 2. API connections for database access
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Our standard service level agreement provides at least 99.5% uptime. This excludes Force Majeure or Maintenance Events.; ; No standarised refund scheme is currently in place.
• Approach to resilience: Available on request
• Outage reporting: The following outage reporting methods are employed:; 1. Customer specific Service Status Dashboard; 2. Email alerts to nominated Customer Contacts; 3. Phone call to nominated customer contact

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
• Access restrictions in management interfaces and support channels: Role-Based Access Controls (RBAC) are used to determine which interfaces and support channels each user can access. With RBAC, each user has the permissions that are attached to any role that is assigned to that user. There are five core roles which users can be given covering read-only access, performing activities and administering the solution.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: Board level Directors are responsible for delivering an integrated governance and risk management approach across the business. A Board Director has ownership and accountability for ensuring compliance, providing assurance, and maintaining a continuous feedback loop that cascades throughout the organisation. In an iterative and continuous process risks are assessed, raised to executives, and aligned to strategic direction. Mitigating activities are prioritised, developed and and implemented then reviewed against risk outcomes. Compliance to an ongoing feedback loop is the core principle underpinning our approach.; ; The SDLC includes security review gateways imbedded within our risk management processes.
• Information security policies and processes: All our information security policies and processes conform with requirements of GDPR, Cyber Essentials, Digital Technology Assessment Criteria (DTAC), Data Security and Protection Toolkit (DSPT), National Data Guardian’s 10 data security standards, and NSW Health Privacy, Security and Assurance Framework. Our information security management system aligns with ISO/IEC 27001 standard, of which we are currently working towards formal certification.; ; All policies and processes are integrated within our business support service with defined workflows ensuring all controls and verification steps are adhered to across all information assets. The same service includes scheduled audits and review tasks to ensure best practice is maintained. The assigned director must review and confirm all activities have been completed in line with policies. A register of activity is maintained and presented to the company board quarterly.; ; Our information security management system is imbedded within our risk management framework. Directors have ownership and accountability for ensuring compliance, providing assurance, and maintaining a continuous feedback loop that cascades throughout the organisation. In an iterative and continuous process risks are assessed, raised to executives, and aligned to strategic direction. Policies, standards, and processes are developed and implemented then reviewed against risk outcomes.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Our software development lifecycle (SDLC) is mature and follows industry standard agile methodology. Continuous Integration and Test automation is in place to ensure repeatable, reliability and robust deployment. Segregation of duty is employed across all SDLC decision gateways and review points.; ; Quality assurance, technical and security gateways are fully integrated within our overall organisational risk and quality frameworks with director level oversight and board level reporting.; ; All changes are supported by test plans covering both pre and post release and are available to customers as requested.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Vulnerability assessments are embedded into our SDLC, overseen by the CTO and carried out by Senior development team. Information is sourced using subscription to vulnerability scanning tools, on-going review of security documentation and regular training. Additionally, results from scheduled audits via our information security management system are fed directly into our vulnerability management process.; ; Any identified vulnerabilities are managed through the organisational risk management framework with director level oversight and board level reporting.; ; Patches can be released in-live, on an ad-hoc basis or as part of our monthly release schedule.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We employ a comprehensive logging and event monitoring system to identify potential compromises. This is supported by an on-host security and scanning system. Automated alerts to engineers and security teams trigger defined processes and protocols for the investigation and resolution of any potential comprise. Our processes cover assessment, resolution, customer notification, government body notification, review and mitigation.; ; Any potential compromise is treated as critical with an initial response time of 15 minutes.
• Incident management type: Supplier-defined controls
• Incident management approach: Patienteer utilises an integrated service desk supported by automated monitoring and event management.; ; Customer may report incidents via email, in-application support request or via a phone call.; ; We have defined processes aligned to the ITIL standard for the reporting, triaging, diagnosing, prioritising and resolving of any incident. Process flows and documentation for common events is incorporated into our support management system.; ; All incidents are documented and integrated into our quality and risk frameworks in a continuous feedback loop. Incidents are reported via email to designated customer contacts and are documented in our service management dashboard.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: Yes
• Connected networks: Health and Social Care Network (HSCN)

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 5%
• Between £250,000 and £500,000: 10%
• Between £500,001 and £1,000,000: 20%
• Between £1,000,001 and £2,500,000: 30%
• Between £2,500,001 and £5,000,000: 40%
• Over £5,000,001: 50%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at craig.burke@patienteer.co. Tell them what format you need. It will help if you say what assistive technology you use.