VISION33 LIMITED

BambooHR

BambooHR is a complete HR suite, it contains all the functionality that a company needs to run a highly efficient HR organisation including Recruitment, Onboarding, Employee Management, Learning and Performance management, Succession and Compensation, Workforce Management, Time Clock and shift scheduling, BambooHR is incredibly flexible and offers cost effective capability.

Features

• Work the Way You Want
• Get running quickly and stay ahead of your competitors
• Manage your teams skills to make they are utilised properly
• BambooHR will increase retention and deliver succession plans
• Realtime reporting using preconfigured adaptable Business Intelligence
• Designed to be easy to use and learn
• On demand solution delivered as software as a service
• Manage by exception helps ensure you don't miss something important
• Key Performance Indicators and Dashboard Management
• Integrated to SAP ByDesign (BYD) NetSuite and other cloud solutions

Benefits

• Take advantage of seamless integrations to Business ByDesign and Netsuite
• Peace of mind easily adapt when your business changes
• Work the Way You Want
• Keeping business on the right track with accurate information
• Manage proactively and keep executives abreast of operational performance
• Increase team utilisation by using comprehensive skills management features
• Plan with confidence by knowing the availability of you team

£6 to £10 a user a month

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at john.palmer@vision33.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

336271795580603

Contact

John Palmer
07771964312
john.palmer@vision33.co.uk

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: The solution is fully integrated to SAP Business ByDesign (BYD) and NetSuite.
• Cloud deployment model: Public cloud
• Service constraints: No
• System requirements:
  • Access is through an internet browser
  • Mobile solutions are included and downloaded from relevant Appstores
  • Maintenance included within annual subscription fee
  • Security, privacy and compliance included
  • Integrated to SAP Cloud Analytics, Business ByDesign and Netsuite
  • Online Training included in annual subscription fee

User support

• Email or online ticketing support: Yes, at extra cost
• Support response times: Vision33 is able to deliver a configured support arrangement to meet the organisations requirements. Standard support is delivered UK Time 08:30 through 17:30.
• User can manage status and priority of support tickets: No
• Phone support: No
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Vision33's Success Assurance Service was conceived as a solution to support our customers needs to ensure successful stress free usage of BambooHR, as well as make sure service availability remains at a level where a return on Investment, data quality and adoption remain high. For customers interested in a more personalised engagement, Customer Success keeps you running at peak performance and gives you more time to strategise for innovation.; ; Success Assurance Service costs an additional 25% of the subscription fee with a minimum fee of £6,000.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: BambooHR is a self-documenting solution with extensive in-built help, community forums, blogs, wiki entries, BambooHR YouTube channel for guidance videos, as well as online user guides and administrator guides.; ; The Help section within BambooHR is also customisable, meaning that a company can add in their own documents and content, including videos.; ; This is of particular use when it comes to on-boarding of new staff; not only can users add their own notes for specific sections, but authorised users could add specific content, such as a job description/duties, or even a "How to Video" for specific roles and functions within that role.; ; A typical implementation will not require additional user documentation, but will include "train the trainer" sessions to key users who co-ordinate the delivery of training to the user base. However, at customer request training can be provided to end users and additional documentation can be provided.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Data held within BambooHR may be exported by:; ; * Mass Data Maintenance functionality; * Open APIs that are standards-based Web Services; * Reporting, dashboards and analytics; * Excel from all results lists, where permissions allow this; ; BambooHR has a native link with MS Excel in order to utilise the power of that solution - so any report that can be created, against any of the data in the solution, can then easily be passed into MS Excel.
• End-of-contract process: As a SaaS based offering, BambooHR provides full technical support and maintenance of the systems within their data centres. This includes all upgrades (performed on a quarterly cycle), bug fixes etc.; An exit plan will be determined on a case by case basis, with steps and charges discussed and mutually agreed.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The HTML5 UI delivers the same functionality look and feel across any browser.; ; Mobile apps ensure that your managers, staff and time writers can always work, enter their data and perform important tasks.; ; The Mobile Apps are available for the following devices: iPhone, iPad, and Android devices.
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: As part of the standard UI it's possible to register a service request.
• Accessibility standards: WCAG 2.1 A
• Accessibility testing: Definition tests etc
• API: Yes
• What users can and can't do using the API: BambooHR currently provides integration scenarios with multiple Web Service API's to enable the standard integration of on-premise, cloud-based, and third-party solutions.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: User interface can be corporately branded by an administrator. Role-based authorisations determine the screen layouts, views and access for each user, as defined by an administrator. Fields, screens, components and objects can be extended (standard)and created (bespoke) by a developer using the software development kit (SDK) based on Visual Studio shell. New fields can be created, existing fields can be relabelled and hidden by an administrator or authorised key user. Administrators and/or key user can create data sources, reports, report views and selections based on standard and bespoke business objects.; ; An administrator or a developer can create and amend PDF output documents. User interface can be personalised by end users, such as resizing and reordering results columns, saving search queries and setting these as the default query for a particular view. End users may add additional fields to results lists and so on through personalisation, where the fields have been made available by an administrator.

Scaling

• Independence of resources: Combined with virtualisation, decoupling hardware from the operating system and applications, multi-tenancy occurs when many customers are served on one instance. Virtual machines (VMs) share the hardware environment, and one system can accommodate more than 100 tenants.; ; Using adaptive computing, virtual machines are not shut down to be rescaled or updated, and changes can be made while they are running applications, with minimal downtimes. To enable this, a new VM is prepared and the application is simply “moved” to the new VM. Moving and rescaling VMs dynamically enables resource independence from the demands of other customers using the same service.

Analytics

• Service usage metrics: Yes
• Metrics types: Ervice usage metrics are as follows:; * User Subscriptions: Current month and last 6 months; * User Interactions by Day; * User Interactions by Hour; * User Login by IP Address and Performance; * Usage by Screen; * Screen Usage Trend; * Screen Adoption By User; * User Logon Activity; * API Usage Statistics; * SOAP API Usage Statistics; * OData API Usage Statistics; * System Availability: Average Availability by month; * System Availability: Downtime Details (instances)
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: BambooHR

Staff security

• Staff security clearance: Staff screening not performed
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v3.0
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Explicit overwriting of storage before reallocation
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Users can export data from the solution in a number of ways:; ; * All results lists in the solution enable the export of the results to XLSX format, where the user authorisations permit this action; * Key business objects such as customers/accounts and opportunities provide the ability to export a summary to PDF format; * Business analytics enable flexible reporting that can be exported to CSV or XML format, or printed (including to file); * Administrators can export data sets using the in-built migration tools, to XML format
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • PDF
  • Webservice (JSON, SOAP, REST)
  • XML
  • XLSX
• Data import formats:
  • CSV
  • Other
• Other data import formats: XML

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)

Availability and resilience

• Guaranteed availability: System availability SLA is 99.5% system availability during each calendar month for production versions.; ; Credits are made available 2% of the Monthly Subscription Fees for each 1% below 99.5% System Availability
• Approach to resilience: Data centres have the following features to ensure continuity of service:; * Redundant additional power network in case of power outage; * Backup batteries and generators; * Redundant additional coolant systems in case of coolant system failure; * Redundant additional internet connection to guarantee connectivity; * Data stored in backup location to save-guard against natural disasters and malicious attacks
• Outage reporting: Where there is a service outage, all affected customers will receive email updates to their nominated IT representative for each of their affected systems.; ; Details included are the system affected, the date/time of the incident start and when it was resolved, a description of the original issue, details of the root cause, problem resolution and corrective action being taken to prevent repeat occurrences.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
  • Other
• Other user authentication: Single sign-on (SSO) is a property of access control of multiple related, yet independent, software systems. With this property, a user logs in with a single ID and password to gain access to any of several related systems.
• Access restrictions in management interfaces and support channels: SAP has been audited according to the highest standards – SAS70; and ISAE3402(ISO27001) and holds the relevant accreditations.; All datacentres are manned 24×7, 365 days a year.; ; A biometrics security system restricts access to authorised personnel, and the datacentres are partitioned so authorised personnel can access only their designated areas.; ; In the datacentres, business data is stored securely. Users who want to access the business data must authenticate themselves, and their identity has to be verified using identity and access management (IAM).
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Username or password
  • Other
• Description of management access authentication: SAP has been audited according to the highest standards – SAS70; and ISAE3402(ISO27001) and holds the relevant accreditations.; All datacentres are manned 24×7, 365 days a year.; ; A biometrics security system restricts access to authorised personnel, and the datacentres are partitioned so authorised personnel can access only their designated areas.; ; In the datacentres, business data is stored securely. Users who want to access the business data must authenticate themselves, and their identity has to be verified using identity and access management (IAM).

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: CSA CCM version 3.0
• Information security policies and processes: All SAP security policies are strictly aligned to ISO27001 Standards.; ; Vision33 Consultants access our BambooHR customers' systems via secure https connections that require a unique user ID and password.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We align our change management processes to the customer's requirements.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: Vulnerability checks are made constantly and any issues that are identified are eliminated immediately with the greatest priority.
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: Data Centres have a Network Operations centre which continuously monitor their networks and communication lines.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: SAP aligns to ITIL incident management processes.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Equal opportunity

  Fighting climate change

  All of our services support organisations in the quest to deliver a carbon neutral existence by promoting removal of unnecessary infrastructure, remote working and a flexible working environment. Our services are digital with a default paperless principle. As a company, we and have chosen from creation to be a work from home environment.

  Covid-19 recovery

  Vision33 and our services promote organisations in their digital revolution and this includes supporting organisations in their recovery from the COVID19 pandemic by enabling remote working, remote implementation, remote support and training of business operations. The result of these services supports organisations in a more agile workplace ensuring flexible working arrangements can be fully supported in a post pandemic world.

  Equal opportunity

  As an organisation we recognise the difference in everyone and support all candidates and employees to fulfil their potential. All employees are supported in training appropriate to their needs through the provision of self paced training and certifications. Our services enable organisations to meet the needs of all employees. As a cloud provider we encourage a flexible employment engagement ensuring that employees can operate flexibly around their needs such as flexible hours, flexible locations etc. All our training materials are self paced and supported by our team ensuring that users are able to realise and be recognised for their potential.

Pricing

• Price: £6 to £10 a user a month
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at john.palmer@vision33.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.