HealthWeb Solutions

GP Portal

GP Portal (https://gp-portal.co.uk/) provides instinctive navigation of content required by GPs and practice staff, with simple search functions and easy-to-use cross referencing. Using these tools, CCGs are able to ensure that clinicians and practice staff remain up-to-date on referrals, pathways, medicines, prescribing, latest news, emergency notifications and more.

Features

• Real-time guidance for GPs
• Prescribing fomulary
• Easily updated content
• Geographically relevant for Primary Care
• Clinical guidance
• Providing referral pathways and secondary care contacts

Benefits

• Deliver all relevant clinical information using a single web portal
• Provide prescribing and referral guidance to clinicians
• Enable GPs to access all info from any modern device
• Empower ICSs to manage content for Primary Care clinicians

£9,950 to £9,950 a licence a year

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at james@healthweb.solutions. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

322663086050757

Contact

James Ogilvie
‪020 7039 3886‬
james@healthweb.solutions

Service scope

• Software add-on or extension: Yes
• What software services is the service an extension to: GP Portal is built as a customised and extended version of the WordPress Content Management System (CMS). It therefore adheres to all the security and user best practices that has made WordPress the leading CMS, including its user-friendly admin interface.
• Cloud deployment model:
  • Public cloud
  • Private cloud
• Service constraints: No - GP Portal is accessible from all modern, standards-compliant web browsers (Chrome, Firefox, Edge, etc.). Note that Internet Explorer is not fully standards-compliant, and is therefore not a supported browser.
• System requirements: None, as GP Portal is a fully hosted solution

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: 1 business day
• User can manage status and priority of support tickets: No
• Phone support: No
• Web chat support: No
• Onsite support: No
• Support levels: Standard email support for any hosted software issues (anything preventing users from accessing the software as expected, other than internet connectivity issues). This support is inclusive within the contract cost.; ; We can provide support for content population at an additional cost.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: HealthWeb Solutions provides the 'Site Manager' level logins to designated staff members. They can then add other users as necessary.; ; We can embed various user training videos and other informational content into the user dashboard.
• Service documentation: Yes
• Documentation formats: HTML
• End-of-contract data extraction: We can provide an archive of all user-entered data in a suitable format to be migrated easily to another WordPress installation.
• End-of-contract process: The agreement continues on a rolling yearly basis, with a 30 day notice period.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: All content is available on modern web-enabled devices of all common sizes, and the user interface adapts as required. GP Portal is a fully responsive webapp.
• Service interface: Yes
• User support accessibility: WCAG 2.1 A
• Description of service interface: A WordPress-based admin and content management interface designed for content teams to manage all information and documents published to the user (GP) facing site.
• Accessibility standards: WCAG 2.1 A
• Accessibility testing: The WordPress interface is regularly tested by the open source community.
• API: No
• Customisation available: Yes
• Description of customisation: Content teams can add, edit and delete all the content types (news, topics, pathways, services, providers, medicines, etc.) using an intuitive interface. User permissions can be customised if required.

Scaling

• Independence of resources: Each instance of GP Portal is fully containerised, ensuring that its resources are not shared by other instances.

Analytics

• Service usage metrics: Yes
• Metrics types: Simple visitor analytics are provided on the Site Manager dashboard.
• Reporting types: Real-time dashboards

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: In-house
• Protecting data at rest: Other
• Other data at rest protection approach: All data is hosted within Digital Ocean data centres in the UK. Each instance of GP Portal uses a separate 'droplet' container, which is destroyed and overwritten when no longer required.
• Data sanitisation process: No
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: We can provide an archive of all user-entered data in a suitable format to be migrated easily to another WordPress installation.
• Data export formats: Other
• Other data export formats: XML
• Data import formats: Other
• Other data import formats: XML

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: We guarantee a 99% uptime for GP Portal, assuming the end user's internet connection is stable. If a critical incident prevents the specified container from serving content for a protracted period (4 hours), we will replicate the instance to another container to provide service continuity.; Any downtime would be refunded on a pro-rata basis.
• Approach to resilience: All GP Portal instances are containerised, preventing any incidents on one instance from affecting another. In addition, we monitor all instances for uptime and response speed every 60 seconds.; If a critical incident occurs, we will intervene to replicate all content onto another instance within 4 hours.
• Outage reporting: HealthWeb Solutions staff are notiified immediately (this is an internal system).

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Username or password
• Access restrictions in management interfaces and support channels: Nominated users are either Site Managers or Content Managers. Site Manager accounts (with the ability to manage users) have two-factor authentication. Content Managers have limited rights and do not require two-factor authentication. Support is via email.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Username or password

Audit information for users

• Access to user activity audit information: No audit information available
• Access to supplier activity audit information: No audit information available
• How long system logs are stored for: Between 1 month and 6 months

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: We keep abreast of all current security practices impacting the WordPress ecosystem. All user data is kept in containerised instances protected by a Web Application Firewall (WAF) and a suite of automated security monitoring and testing scripts.
• Information security policies and processes: Any security incidents are reported to the Technical Director (our Data Officer) for immediate review and action.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: GP Portal is standardised against current WordPress best practices, and most configuration is a) simple and b) done by the Site Manager(s). No changes that a Site Manager could make (content and user management) are likely to have security implications.; ; Any changes to an instance of GP Portal (which is supplied as an 'off the shelf' solution fitting the vast majority of CCG/ICS use cases) would be discussed with the individual CCG/ICS and assessed from there.
• Vulnerability management type: Undisclosed
• Vulnerability management approach: We undertake automated weekly security audits of each instance of GP Portal, and the underlying security testing framework is regularly updated with known threats. Patches to WordPress core and plugin code are applied weekly. Threat information comes from a variety of sources.
• Protective monitoring type: Undisclosed
• Protective monitoring approach: Each automated security scan checks the contents of the entire filesystem for new content, comparing it against fingerprints of known malicious code. Any suspicious code is flagged for investigation immediately. Any security incidents are acted upon within 4 hours during business hours.
• Incident management type: Undisclosed
• Incident management approach: Should an instance of GP Portal be compromised, we would roll back the instance to a previous known-clean state and then audit the suspect code to establish how the incident occurred. Incidents would be highly unlikely to be visible to users, although they are able to report any concerns through our standard support channel. We would provide a brief incident report by email.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Social Value

• Covid-19 recovery:

  Covid-19 recovery

  Our directors have extensive experience in covid response and post covid recovery. We work with NHS organisations with an understanding of the recovery agenda and strategic planning. Our products contribute to primary care working, pathway management and referrals as part of the covid-19 recovery.
• Tackling economic inequality:

  Tackling economic inequality

  GP Portal assists primary care practitioners to serve and care for their whole community and supports the provision of NHS services regardless of economic status
• Equal opportunity:

  Equal opportunity

  We champion equal opportunity in the NHS and public sector and have a good understanding of the NHS equality, diversity and inclusion agenda, ensuring our business practices comply, both in work with our clients and as a company
• Wellbeing:

  Wellbeing

  GP Portal supports health and wellbeing through delivery of NHS services and in addition, supports the wellbeing of GPs and primary care with improved systems and working.

Pricing

• Price: £9,950 to £9,950 a licence a year
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at james@healthweb.solutions. Tell them what format you need. It will help if you say what assistive technology you use.