EVALUCOM CONSULTING LTD

CarePulse market management

CarePulse is an innovative and collaborative commissioning solution focussed on patient choice and care quality.

Our experts use innovative web-based software to implement Any Qualified Provider (AQP) commissioning solutions that support the end-to-end commissioning cycle for Continuing Healthcare (CHC), Funded Nursing Care, Mental Health, Learning Disability, Children & Young People.

Features

• Market analysis dashboards- dynamic, interactive online market management insights
• Cost modelling- robust online care cost data collection and validation
• E-procurement system- bespoke online solution compliant with public procurement regulations
• Directory of services- search by vacancies, specialisms and CQC rating
• Care quality monitoring- monthly interactive quality insight dashboards
• Digital placement agreements- improved contractual governance and assurance
• Care cost calculators- improved spend control and standardisation
• e-brokerage - transparent and auditable digital referral process
• Contract mobilisation system- e-signature enabled with status monitoring
• API with CQC and CSV exports of datasets

Benefits

• Improve the accuracy of self-reported information (e.g. quality metrics)
• Enhance the user experience (quicker, easier, once only)
• Gain insights by exploring rich data visualisations
• Save time and money through efficient, global real-time vacancy system
• Maximise use of existing health and social care capacity
• Comply with reporting requirements regardless of device
• Comply with public procurement regulations
• Export or print datasets to share with third parties
• Enhance service selection user experience by providing comprehensive easy-to-read information
• Quickly make online referrals and consistently evaluate provider responses

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at michael.mchugh@evalucom.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

368204791896626

Contact

Michael McHugh
02039704047
michael.mchugh@evalucom.co.uk

About your service

• Service categories:

  Applications

  Production and operations

  Service industry and public sector operations

  • Healthcare
  • Adult Social Care
  • Children's Social Care
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: No
• System requirements:
  • Web browser with enabled cookies and JavaScript
  • Stable and fast internet connectivity

User support

• Email or online ticketing support: Yes
• Support response times: Within 4 hours on weekdays, no support during weekends.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Tier 1: Initial support level responsible for basic customer issues, reachable via email and phone.; Tier 2: In-depth technical support for technical problems that can not be solved by Tier 1 support.; Tier 3: Highest level of technical support for handling the most advanced problems.; ; The support levels are included as part of the service and have no associated additional costs (other than on-site support).; ; A technical account manager is provided.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: When all new users join our service, we send personalised introductory emails which include:; ; • an overview of the service; • where to find key information and supporting documents within the system, including FAQs and regionally specific information; • key contact details for support; ; When a group of new users from the same organisation join the service, we offer onsite introductions and training alongside personal introductions. Screen sharing webinars are held to train new users from a number of different organisations simultaneously.; ; When a significant update is made to the system, we send a summary of the changes to all current users and offer introductory webinars.
• Service documentation: No
• End-of-contract data extraction: Users can extract their data using CSV exports.
• End-of-contract process: The user account will be closed down, access to the system will be revoked. Data will be transferred as required. There are no additional costs.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The web interfaces follow Responsive Design principles and thus pages adapt their content layout based on the size and orientation of the screen. They will therefore look different on mobile and desktop environments.; ; Performance may be slightly worse on mobile, due to the differences in hardware capabilities. Devices with less RAM could experience longer loading times for the interactive data visualisations. The data visualisations are rendered in JavaScript and are thus dependent on device CPU and RAM capabilities.
• Service interface: No
• User support accessibility: WCAG 2.2 AA
• API: No
• Customisation available: Yes
• Description of customisation: CarePulse is customised for users by the system developers in the backend. Customisation includes:; ; - Service details (e.g. geography, specialisms) which are built into filters in the services directory; ; - Bespoke scoring for the e-brokerage system to align with local Choice and Equity policies; ; - Thresholds for quality reporting data; ; - Qualification and eligibility criteria for the procurement processes; ; - Contract prices; ; - SUPA/IPA template customisation

Scaling

• Independence of resources: Server capacities are monitored and in case of high usage of the system, a seamless up-scaling for additional servers can be performed.

Analytics

• Service usage metrics: Yes
• Metrics types: We provide bespoke reports to the client summarising a range of service use information, including CarePulse utilisation by staff and providers, and contract performance metrics.
• Reporting types:
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: Never
• Protecting data at rest:
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: Users can export data via CSV exports.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Available 99.5% of the time on a 24/7 basis.; ; User refunds can be agreed on a case-by-case basis.
• Approach to resilience: CarePulse resides within AWS and Heroku and utilises the extensive resiliency features of AWS to deliver our solution.; ; Flexible up and downscaling of hosting capabilities in multiple regions allow our system to be resilient to failures in specific locations.
• Outage reporting: Scheduled outages are announced via CarePulse and unexpected failures are announced via email alerts.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: Users are assigned to groups and groups are assigned to permissions. Based on user permissions, interfaces adjust the content displayed to the authenticated user. To ensure that only users who should access certain content are able to access the content, additional permission checks are performed in the back-end.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: Less than 1 month

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: Information governance (IG) and security is the responsibility of a named IG lead.; ; The IG lead works with the IT manager to ensure all systems, services and equipment used for storing data meet acceptable security standards and that new and existing systems developed by the company are compliant with documented information security policies.; ; The IG lead is consulted during the design, development and/or implementation phase of any new systems, processes or projects carried out by the company to ensure information security.; ; The IT manager is responsible for performing regular checks and scans to ensure security hardware/software are functioning properly.
• Information security policies and processes: We follow detailed documented information security policies. These policies are reviewed annually at a minimum to ensure compliance with legal and regulatory requirements.; ; All new systems or processes undergo an Information Security Assessment. Appropriate steps are taken to mitigate any information security risks identified during the assessment.; ; The Information Governance lead reports directly to senior management. Information and security risks are raised with senior management as part of standard company risk reporting mechanisms.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: All hardware components of the service are managed and tracked by Heroku and AWS. Maintenance work and security updates are performed on a scheduled basis by Heroku and AWS.; ; The service source code is designed, developed, tested and deployed internally and undergoes code reviews, user testing and automated unit tests before being deployed to the live environment. Every pull request has to be reviewed and approved by at least one senior developer before it can be merged with the master branch. Changes to the source code are tracked using version control and assessed for potential security impact (GitHub).
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: GitHub regularly performs vulnerability checks on all software package dependencies of the service and assesses the potential threat level. In cases where a vulnerability is detected, a patch is deployed within one working day.; ; Vulnerabilities on an operating system level are assessed and dealt with by AWS and Heroku.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We use Github security monitoring to audit the CarePulse source code and use third party packages to proactively discover and address responsibilities. Any compromises identified are then investigated and appropriately dealt with within one working day as per the Incident Management processes.
• Incident management type: Supplier-defined controls
• Incident management approach: Pre-defined processes for common incidents are in place. The processes lay out specific instructions that should be followed in case an incident occurs.; ; Users can report incidents via the help centre (email and phone) or use the built-in feedback form functionality of the system. The incidents are then assessed and investigated using our third party protective monitoring application and dealt with accordingly.; ; Security incidents of relevance are reported within 5 working days through CarePulse's announcement system.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 8cf1230a-7041-4ba7-b6ab-f93b5a8c1872
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at michael.mchugh@evalucom.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.