Agilio Software

Agilio iLearn

Agilio iLearn is an eLearning-first training platform for primary care organisations. It delivers role-specific learning, compliance tracking and reporting, with optional deep integration into Agilio TeamNet. The platform supports onboarding, statutory and mandatory training, and continuous professional development at scale.

Features

• eLearning-first platform designed specifically for primary care
• Library of role-specific statutory and mandatory training
• Custom learning pathways by role, organisation or service
• Automated training assignments and reminders
• Compliance dashboards and real-time reporting
• Learner progress tracking and audit-ready evidence
• Mobile-friendly, browser-based access
• SCORM-compliant content support
• Optional deep integration with Agilio TeamNet
• Secure, NHS-aligned hosting and data protection controls

Benefits

• Reduces administrative burden of managing training
• Improves compliance with statutory and mandatory requirements
• Ensures staff receive training relevant to their role
• Speeds up onboarding for new starters
• Provides clear evidence for inspections and audits
• Enables consistent training delivery across organisations
• Supports continuous professional development
• Improves staff engagement through accessible learning
• Integrates training with wider workforce management processes
• Scales easily as organisations grow or change

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at james.stephenson@agiliosoftware.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

196728571032035

Contact

James Stephenson
01912875800
james.stephenson@agiliosoftware.com

About your service

• Service categories:

  Applications

  Production and operations

  Service industry and public sector operations

  • Healthcare
• Multi cloud support: No

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Agilio TeamNet
• Cloud deployment model: Public cloud
• Service constraints: None
• System requirements: We support all modern internet browsers

User support

• Email or online ticketing support: Yes
• Support response times: First response target is 4hrs and resolution target is 8hrs.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Yes
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: WCAG 2.2 AA
• Web chat accessibility testing: Third party service
• Onsite support: Yes, at extra cost
• Support levels: Agilio Software provides a dedicated in-house User Support Team, based in the UK, providing support during Monday - Friday, and during the hours of 09:00-17:00. Any user can contact the Support Team by telephone on or by email. All support is free of charge.
• Support available to third parties: Yes
• AI chatbot: Yes

Onboarding and offboarding

• Getting started: The solution can be configured and deployed for a customer in a matter of hours upon the receipt of initial users and organisational information.; The Agilio support team will coordinate setting up of portals with the appropriate managers. A centralised training session will be arranged (Setup assistance is built into the platform).; ; A data import service is available. Data is often held on shared drives. TeamNet Support can work with the customer and practice managers to import information in its native file format to the TeamNet solution wherever possible.; ; With the package, we also include implementation project support. This includes:; ● Use of our established project approach; ● Launch and awareness meetings; ● Awareness presentations to Governing Body and locality groups; ● Analytics and usage statistics; ● Monthly review sessions by phone or, by mutual agreement, on client premise
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Agilio shall, on the Customer’s request and at Agilio’s standard daily rates, provide reasonable assistance with the migration of any Customer data to the Customer’s IT systems. Information held in TeamNet is at all times owned by, and the sole responsibility; of the customer.
• End-of-contract process: Agilio shall, on the Customer’s request and at Agilio’s standard daily rates, provide reasonable assistance with the migration of any Customer data to the Customer’s IT systems.
• Documentation accessibility standard: EN 301 549

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: None or don’t know
• API: No
• Customisation available: Yes
• Description of customisation: Customisation options are made available via the role based security model to the Primary contacts of each individual portal.; ; A set-up module is provided to these users that defines the modules they wish to utilise and their effect. Options are defined using a simple drop down and tick box interface.; ; These users also have the ability to configure certain menu items as well as be able to update the branding on their homepage to something more bespoke to the work setting.

Scaling

• Independence of resources: Our service is constantly monitored to ensure that we have sufficient resources available to meet the needs of our users.

Analytics

• Service usage metrics: Yes
• Metrics types: View and login dates by team/portal. Others by agreement.
• Reporting types:
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Staff screening not performed
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest: Physical access control, complying with another standard
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: Many areas of the platform provide downloads in PDF or Excel (CSV) formats.
• Data export formats:
  • CSV
  • Other
• Other data export formats: Any formats as uploaded (e.g. Microsoft Office)
• Data import formats:
  • CSV
  • Other
• Other data import formats: Any formats as uploaded (e.g. Microsoft Office)

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: Our target availability is that the services are available on a 99.5% basis, measured each calendar month. The SLA's are set out within our terms and condition
• Approach to resilience: Available on request
• Outage reporting: Email alerts

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: Management channels and interfaces are restricted by critical contacts at a trust providing us with bona fide contact user name, email and role. Verification is checked before allowing access to the application. Role based access is also a core feature of the tool which can further restrict access only to appropriate areas of the application.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Security policies and procedures are documented in our ISMS, which is independently audited and certificated to ISO27001. This includes board level responsibility and formal paths for asset ownership and risk management.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Configuration and change management is operated within the ISO27001 framework. Asset registers are maintained by the information asset owner to ensure component assets and access to them are monitored and controlled on a constant basis. Changes are identified and planned with authorisation at the project, director or board levels dependant on the nature of the change to the service. Changes are planned and tested based on risk assessment, scope of change and criticality to the service. Fallback procedures, including procedures and responsibilities for aborting and recovering from unsuccessful changes and unforeseen events, are maintained to provide a "means of escape".
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Threats and vulnerabilities are reviewed prioritised action. Fixes can be deployed by the product team with as little delay as practicable and in a manner that reduces the need to take the service offline. Likely potential threats include both technological and regulatory sources. These are identified via a monitoring software, user feedback, security blogs, regulator advice, partner organisations etc. In addition we utilise antivirus software and firewalls to mitigate the risk.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Detailed domain and activity logs are retained. Logs are in place against each asset/component and alerts are generated for the relevant team dependent on the issue/asset to be analysed and assessed. Potential compromises are assessed immediately and escalated as required. Fixes can be deployed by the product team with as little delay as practicable and in a manner that reduces the need to take the service offline. We also utilise anti virus software and firewalls.
• Incident management type: Supplier-defined controls
• Incident management approach: Incidents are managed following a pre defined process including -Monitoring, detecting, analysing and reporting of security incidents and events -Incident response planning and preparation -Handling of evidence -Assessment and decision on security incidents and security weaknesses -Escalation, controlled recovery from an incident and communication to both internal and external people and organisations -Security incidents of relevance to you will be reported in acceptable timescales and formats Users report incidents via the helpdesk or telephone. Incidents are recorded in the incident log including details of the incident, actions taken.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 2%
• Between £250,000 and £500,000: 2%
• Between £500,001 and £1,000,000: 2%
• Between £1,000,001 and £2,500,000: 3%
• Between £2,500,001 and £5,000,000: 4%
• Over £5,000,001: 5%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: BSI
• ISO/IEC 27001 accreditation date: Tuesday 5 August 2025
• What the ISO/IEC 27001 doesn’t cover: Third party hosting providers, though we ensure these have the appropriate certifications.
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 52a320b3-2bbb-40f3-bafe-125b212505d4
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 72d53a2b-43d0-4b07-be4d-fe4f56ac9489
• Other security certifications: Yes
• Any other security certifications: NHS DSPT

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Plans for positive actions with community groups.

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at james.stephenson@agiliosoftware.com. Tell them what format you need. It will help if you say what assistive technology you use.