SAP UK Ltd

SAP Signavio

SAP Signavio is the market leader in Business Process Analysis, Transformation and Continuous Improvement, allowing easy collaboration to design, improve, and analyse business processes. It combines process management, process mining, process governance, cross-functional collaboration, a unique library of thousands of assets and models, and supports automation.

Features

• Business Process Management
• Process Mining and automatic generation of initial, baseline process maps
• Process Governance with automated workflow for case management
• Collaborative, Cross functional, user friendly, Single Process Repository
• Customer Journey Modelling and Process Analytics
• Business Process Simulation, quantifying and qualifying benefits of change
• Decision Model and Notation diagrams for Business Decision Management
• Process Benchmarking, Conformance, and Compliance Checking
• Process dictionary to maintain standard business topology framework
• Technology Agnostic for both non-SAP and SAP applications

Benefits

• Integrated, end-to-end platform lowers Total Cost of Ownership
• Easy to use process modelling saves time to design processes
• Consistently assure standards through use of process dictionary and controls
• Save time by autogenerating process maps from process mining
• Process mining analytics and root cause analysis identifying improvement opportunities
• Ensure cost and time gains are sustained with conformance monitoring
• Single source of truth for processes, work instructions, business decisions
• Organisation wide, intuitive, collaborative dashboard, accessing process repository and analytics
• Quickly and accurately justify change benefits through Business Simulation
• Integrate and manage organisational risks, controls, regulations in process models

£2,000 a user a year

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at UKPublicSector@sap.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

194459466623900

Contact

David Dinsdale
+44 870 608 4000
UKPublicSector@sap.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: There are no constraints using the service.
• System requirements:
  • Web Browser
  • Internet access

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Different ticket priorities have different response times, but the maximum response time for a Priority 1 ticket is 4 hours. Overall SLA's will align and be triaged with the support organisation.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: Web chat
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: Through the service.sap.com website
• Web chat accessibility testing: SAP takes pride in its diverse workforce. To foster a global culture of inclusion, we are strongly committed to respecting and protecting human rights throughout the lifecycle of our products and services: from design through development to use. Hence, our products are increasingly guided by the Web Content Accessibility Guidelines 2.0 (WCAG) and the US Section 508.
• Onsite support: Yes, at extra cost
• Support levels: 1. Very High - A support message is priority one if the problem has very serious consequences for normal business transactions and prevents urgent, business-critical work from being performed. The message requires immediate processing because the malfunction can cause serious losses. 2. High - A support message is priority two if normal business transactions in a production system are seriously affected and prevent necessary tasks from being performed. 3. Medium 4. Low
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: SAP Signavio provides a host of services for onboarding, including training & enablement, knowledge transfer, implementation & deployment, pre-built assets and model libraries, online learning, webinars, help guides, and community pages.; ; For deployment, training and enablement, knowledge transfer, SAP Signavio services offers Quickstart programmes. SAP Signavio’s certified professional services team uses a proven methodology of consulting and training services, shadowing, accelerators, templates, and best practices. Each programme has a fixed price and fixed duration allowing better budgeting and scheduling. They can be extended with additional support if desired.; ; Quickstart programmes are available for business process modelling & management, process mining and process discovery, collaboration, and process governance. Key aspects and benefits include:; ; - adopt proven deployment methodology; - faster time-to-value; - reduce implementation and deployment risks; - best practices and lessons learned from over several hundred Client engagements; - experienced consultants with in-depth Signavio expertise; - collaborative approach, extensive enablement, coaching, mentoring and knowledge transfer; ; Additional services can be provided to support extended and bespoke activities, such as advisory services.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Users can extract their data using the "Export/Import" feature option in the SAP Signavio Process Manager. This will enable the user to export in a range of file formats including XML
• End-of-contract process: Users must submit contract cancellation notification prior to autorenewal date, in accordance with their commercial contract with SAP Signavio. In the course of contract termination, if so desired, SAP Signavio can hand over a data file with the customer’s data. The data can be read with conventional data processing or graphical software (e.g. XML, PNG, SVG, JSON) and can be processed further.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: We only provide mobile support for the SAP Signavio Process Collaboration Hub module.
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: SAP Signavio has a simple, intuitive, web-based interface allowing users to interactively view business process diagrams and information. Business processes can be structured, such as organisationally, functionally, departmentally, value stream. Selecting business processes, or business process tasks, will provide the user with additional metadata, information, and access to third party links if available, providing a full and data rich experience. The interface can integrate process analytics e.g. from Signavio process mining, to support automation initiatives and assist business simulation. It can extend organisation wide, customised for specific persona, to become a common dashboard and single source of process knowledge.
• Accessibility standards: None or don’t know
• Description of accessibility: SAP Signavio has been built based on some of the WCAG standards.
• Accessibility testing: None
• API: Yes
• What users can and can't do using the API: There are 2 API's. A RESTful HTTP(S) API and a Javascript Mash-up API.; ; You can use the RESTful API to integrate your systems and third-party systems with the Signavio application server. A RESTful API uses HTTP methods like GET, POST, PUT and DELETE to create, access and manipulate HTTP resources. The Signavio REST API is mainly designed for client to server request communication. Most HTTP response data uses the JSON format.; ; The SAP Signavio Mash-up API is a Javascript library for embedding SAP Signavio models into 3rd-party web applications. It provides configurable read-only view of diagrams and allows to highlight shapes and to plug in custom functionality.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: SAP Signavio can be self-sufficiently configured saving time and money. It is highly configurable, and hence it is presented 'out-of-the-box' with most commonly used functions and configuration pre-built. Signavio has extensive guides on configuring Signavio.; ; Users of Signavio can self-sufficiently modify their views, add analytics tiles, etc.; ; Signavio can be extended across the organisation, to end users / employees through Signavio Collaboration Hub. This is a browser based dashboard with an intuitive interface that can be customised to adopt company branding, colours, logos, 'look & feel' ; it can use images and icons for navigation ; it can be integrated into existing company portals for example. This customisation can be performed by system administrators.

Scaling

• Independence of resources: SAP Signavio provides a scalable cloud service which is designed to grow with demand including performance and storage. This also includes the use of a Load Balancing approach to its architecture.

Analytics

• Service usage metrics: Yes
• Metrics types: The SAP Signavio "governance report" provides an overview of the user activity in your workspace. Here, you can get aggregate metrics (for example, the number of unpublished diagrams) that you can use to draw conclusions regarding the success of your process modeling initiative. You can also find metrics on the number of unique user logins to SAP Signavio Collaboration Hub.
• Reporting types:
  • API access
  • Real-time dashboards

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Users can extract their data using the "Export/Import" feature option in the SAP Signavio Process Manager. This will enable the user to export in a range of file formats including XML
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • PDF
  • XML
  • SVG
  • SGX
  • XPDL 2.1
  • BPMN 2.0
  • PNG
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • XPDL 2.1
  • BPMN 2.0 XML
  • SGX
  • PNG
  • SVG
  • ARIS Markup Language
  • VSD
  • VSDX
  • APQC

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Other
• Other protection within supplier network: Administrative access (e.g., via SSH) is secured by a VPN. Access to the VPN is secured by means of two factor authentication (password and certificate). The servers of the production system are used exclusively for running the product, and have no open external ports except for HTTP(S) (ports 80 and 443). Access via SSH is only possible from the VPN.

Availability and resilience

• Guaranteed availability: The SLA is 99.9% up time, with planned outages at the weekend. SAP will provide to customers a monthly report describing the System Availability percentage for the applicable SAP Cloud Service either (i) by email following a customer’s request to its assigned SAP account manager, (ii) through the SAP Cloud Service or (iii) through an online portal made available to customers, if and when such online portal becomes available. Customer may claim a credit in the amount described in the table of Section 3.2 in the below document, in case of SAP’s failure to meet the System Availability SLA, which credit Customer may apply to a future invoice relating to the SAP Cloud Service that did not meet the System Availability SLA. Claims under this Service Level Agreement for SAP Cloud Services must be made in good faith and by submitting a support case within thirty (30) business days after the end of the relevant Month in which SAP did not meet the System Availability SLA. For more more information on this, please see this document: https://www.sap.com/uk/about/trust-center/agreements/cloud/cloud-services.html?search=Service+Level+Agreement&sort=latest_desc&tag=language:english&pdf-asset=c6188734-927d-0010-87a3-c30de2ffd8ff&page=1
• Approach to resilience: SAP Signavio provides high availability. Data is stored on redundant drives and backups are located in different physical locations. Our server infrastructure is defined in our deployment code and can be rebuilt automatically within hours when a data center would fail.
• Outage reporting: In case of an outage affected customer would get an alert via email.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Access rights are given based on role of the employee (Need-to-Know and Need-to-Do principles). For administrative access, Signavio uses passwords of 20 characters minimum length and a secure connection (SSH, 2048 bit) via VPN (two factor authentication). Access from Customer site is possible via Customer defined password policies or SSO, IP whitelisting can be activated. Support Channels can be accessed with user name (eMail-address) registered as user within the services. Administrators on customer site must be registered as such at the Customer Service prior to a support request from that person.
• Access restriction testing frequency: Less than once a year
• Management access authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: Between 1 month and 6 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: Between 1 month and 6 months
• How long system logs are stored for: Between 1 month and 6 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Amazon Web Servicies, Inc.
• ISO/IEC 27001 accreditation date: November 5, 2019
• What the ISO/IEC 27001 doesn’t cover: Sales department and sales locations
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: SAP Signavio has established and maintains a set of policies, SOPs and sub-process in accordance with ISO 27001 covering physical security, handling of systems, assets and information during their life cycle, IT procurement, incident handling, staff security, access management, disaster recovery, creation and maintenance of policies and SOPs, risk management, information security responsibilities, secure development, patch and change management. SAP Signavio's Information Security department creates policies and SOPs and controls if they are followed. Non-compliance is reported to the C-Level, HR and the direct Manager of the employee.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: SaaS Model so all configuration and updates are controlled by SAP.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: SAP’s security-patch management process mitigates threats and vulnerabilities. SAP’s security team rates security patches based on the Common Vulnerability Scoring System standard for operating systems, databases,and virtualization in cloud services. Critical security vulnerabilities that might endanger SAP’s service delivery capabilities. Platform are patched on a priority basis normally on a weekly basis during the weekend.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Securing Cloud services undertakes sophisticated monitoring for malware protection and monitoring. Therefore, SAP has defined and implemented a malware management process with which we consistently and continuously ensure secure service delivery free of viruses, spam, spyware, and other malicious software. It comprises antimalware agent deployment, regular scans, and malware reporting processes.
• Incident management type: Supplier-defined controls
• Incident management approach: Incident management process that is aligned with the International Organization for Standardization (ISO) and International Electrotechnical Commission (IEC) 27035:2011 information security principles. Security incidents are monitored and tracked by security specialists in cooperation with defined communication channels until resolved. A security breach involves the accidental or unlawful destruction, loss, alteration, or disclosure of customer personal data or confidential data. Or it may refer to a similar incident involving personal data for which a data processor is required under applicable law to provide notice to the data controller.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  SAP is committed to a future sustainable world and acts as both an exemplar and enabler of sustainability. For the 16th consecutive year, SAP was named the Software Industry Leader in the Dow Jones Sustainability Index - https://www.sap.com/sustainability/our-approach.html. SAP is committed to fighting climate change by reducing carbon and other emissions. SAP became Carbon Neutral by 2023 and will be Net Zero by 2030. ; ; On any G-Cloud Contract, SAP will create a Social Value Action plan in collaboration with the buyer. Progress will be reviewed, and the plan will be refreshed annually. For fighting climate change, we expect that this plan will include: ; ; supporting your journey to Net Zero by ensuring renewable energy is used in the data centres providing the services and that all services will be 100% carbon neutral from the first day of service. ; ; offer a workshop to the buyer’s team on the sustainability features of the product that has been purchased and / or the wider SAP suite of sustainability offerings such as the Sustainability Control Tower. ; ; Work with the buyer’s team to promote the free, high-quality learning about sustainability that is available and free to any member of the public on the Open SAP learning portal at https://learning.sap.com.

  Covid-19 recovery

  On any G-Cloud Contract, SAP will create a Social Value Action plan in collaboration with the buyer. Progress will be reviewed, and the plan will be refreshed annually. To help local communities to manage and recover from the impact of COVID-19, SAP can support buyers in several areas. As part of the Social Value Action plan, SAP will: ; ; To support re-training and other return to work opportunities for those left unemployed by COVID-19, particularly new opportunities in high growth sectors. SAP will offer a range of free on-demand and facilitated training to communities served by the buyer. This will be delivered free using the SAP learning portal at https://learning.sap.com. Currently available courses include topics like Circular Economies, Opportunities from a Digitally Transformed Economy and New Work and Purpose. ; ; SAP offers buyers support in key areas for social value relating to COVID 19 Recovery – new ways of working to deliver services; support for the physical and mental health of people affected by COVID-19 and improved workplace conditions such as remote working and sustainable travel solutions. As part of the Social Value Action plan, we will offer a workshop to explain the support we can offer and add tasks to the plan where appropriate.

  Tackling economic inequality

  There are two themes outlined in the guidance relating to this area of social value - Create new businesses, new jobs and new skills; and increase supply chain resilience and capacity. ; ; With respect to skills, as part of the annual Social Value Action plan: ; ; SAP will offer a range of free on-demand and facilitated training to communities served by the buyer. This will be delivered free using the SAP Learning portal at https://learning.sap.com. Currently courses cover a range of in demand skills in the IT industry such as Artificial Intelligence, Analytics and Application Development. For these courses, where relevant, SAP will also provide access to technical platforms at no charge so that students may complete the practical learning components of each course. ; ; With respect to increasing supply chain resilience and capacity, as part of the annual Social Value Action plan: ; ; SAP will offer to brief the buyer’s procurement and finance teams on the opportunities relating to the SAP Ariba Procurement offering. This could include on-boarding the buyer’s suppliers to the SAP Business Network, a €3.2TN marketplace for suppliers where they can grow their businesses. SAP Ariba Procurement also offers capabilities around supplier risk management to ensure that the buyer’s supply chain achieves the desired level of resilience. The guided buying capabilities of SAP Ariba Procurement also allow the buyer to make it easy for staff to support and comply with organisational social objectives, for example spending with sustainable enterprises or local small businesses. SAP will also share our learnings from 5 by 5 in ’25, an initiative designed to encourage organizations across industries to direct more of their addressable spend toward certified social-enterprise and diverse-business suppliers. https://news.sap.com/2020/10/sap-launches-55by25-purposeful-procurement/

  Equal opportunity

  SAP is committed to being one of the most diverse and inclusive software companies in the world. We proactively promote diversity, inclusion, and social justice and work to ensure that our workforce reflects the gender parity and demographics of all the regions where we have employees. We make every effort to ensure that all stages of the employee lifecycle are inclusive to enable employee success. As part of the Social Value Action plan, SAP will propose a Social Innovation Workshop to explore areas of equal opportunity and look at how we approach diversity and inclusion to see how a shared approach with the buyer could help the buyer’s staff and communities that the buyer serves. For example, SAP supports the following organisations and initiatives: ; ; Stemettes is an award-winning social enterprise working across the UK & Ireland and beyond to inspire and support young women and young non-binary people into Science, Technology, Engineering and Maths careers (known collectively as STEM). ; ; Enactus UK – SAP is the Platinum technology partner for Enactus UK, giving access to one of the UK’s largest innovation and entrepreneur networks in the UK. Enactus allows teams of students all over the country to work together to find innovative solutions to social issues within their local and international communities; ; ; Apps For Good believes that all young people should be empowered to take action on the things they care about most. They provide free tech innovation courses to schools, giving teachers ready-made education content, so young people from all backgrounds can develop computing and essential skills to create a brighter future through technology. Apps For Good partner with leading brands to keep their course content 100% free of charge to schools, as well as giving students the opportunity to directly benefit from their industry expertise.

  Wellbeing

  As part of the Social Innovation Workshop described in the Equal Opportunity section, SAP will include the theme of ‘Wellbeing’ to review optional initiatives that can be added to the Social Value Action plan. For example: ; ; Innovation – SAP offers clients the ability to run innovation workshops on themes that are important to clients. This is often in collaboration with users and communities who can codesign and create a proof of concept of solutions that would address specific challenges and opportunities. We will also offer free training on innovation topics via our SAP Learning portal - https://learning.sap.com. Current courses include Intrapreneurship – Employee-driven Innovation. ; ; Employee and community pulse – SAP is a leading provider of solutions relating to personal wellbeing. We offer to share our learnings of what works well for different challenges and situations that clients wish to explore. We can share examples of how organisations have supported the physical and mental health of their workforce. A current example would be around working practices and return to work in a post COVID pandemic world. ; ; Self-service and a great user experience are key principles of SAP services. We will share insights learned from working with many public service organisations and the world’s most recognised brands on how digital services can bring people and communities together. These insights may then trigger actions that can be added to the Social Value Action plan.

Pricing

• Price: £2,000 a user a year
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: SAP Signavio offers a 30 day free trial, which can be requested directly from the link below.; ; Included in this trial are SAP Signavio components: ; - Process Manager; - Collaboration Hub; - Process Intelligence for process mining; - Journey Modeler; ; A longer trial can be agreed on request.
• Link to free trial: https://www.signavio.com/

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at UKPublicSector@sap.com. Tell them what format you need. It will help if you say what assistive technology you use.