E.NOVATION UK LIMITED TRADING AS ENOVATION

Enovation Transfer

Enovation Transfer is a software application to support the patient discharge and transfer of care process between healthcare organisations like hospitals, nursing homes, home care, general practitioners, transfer of care hub etc.

Features

• One digital platform for regional collaboration
• Workflow/Process support for the transfer of care
• Supports up- and downstream transfer of care
• Capacity tracker with up-to-date overview of (bed / homecare) capacity
• Easy communication via chat and communication journal
• Standardised transfer of care file to collect all necessary information
• Alerts and notifications
• Management information and reporting
• Single Sign On integration
• Integration with EPR's

Benefits

• Effective collaboration between all stakeholders
• Standardised and transparent process: reduces lead time and costs
• Insight into status, progress and information for everyone involved
• Reduces the number of phone calls, emails etc.
• One digital record, no information is lost and fewer errors
• Less paperwork, good for the environment
• Capacity management – ​​improves the speed of overperformance
• Reduction of the length of stay and misallocation of patients
• Decrease in administrative burdens
• Easy to use for all stakeholders

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales.uk@enovationgroup.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

398767165769021

Contact

Liam.Canham@enovationgroup.com
08445611814
sales.uk@enovationgroup.com

About your service

• Service categories:

  Applications

  Collaborative

  • Team collaboration
• Multi cloud support: No

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Enovation Transfer is mainly a substantial service but it act as a intermediate between primary systems and therefore it integrates tight with Healthcare Information Systems / Electronic Patient Record based on HL7 / FHIR / SSO. Patient information from the EPR will be auto populated into Enovation Transfer.
• Cloud deployment model: Public cloud
• Service constraints: Maintenance and support arrangements are available in the SLA document.
• System requirements: Except from a proper browser there are no requirements.

User support

• Email or online ticketing support: Yes
• Support response times: Standard support hours are Monday - Friday, 08.30 to 17.30 (excluding public holidays).; ; The response times depend on type of support question and priority (impact vs urgency) as stated in the SLA document.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Support is available by telephone during normal business hours, which is 08.30 to 17.30 5 days per week (excluding public holidays).; ; Support can be divided into:; - service requests; - change requests; - incidents; ; Depending on type of support and priority classification request will be handled . Specific change requests might incur additional cost. Additional work will be recorded in a quotation or can be deducted from a work credit (if purchased).; ; Dependant on the size and scope of project a technical support person would be allocated.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Enovation can provide both onsite and online training for integrators, administrators and end-users including manuals.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Each transfer allows for the extraction of all data related to an organisation. Every form is exported as a PDF, and all attachments are retained in their original uploaded format.; Besides that, it is possible to realise a one-time dump at additional cost.
• End-of-contract process: Enovation will inform the client at the time of cancellation of the possibility to make PDF downloads. Enovation cannot migrate data to the client or to the new service provider.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Onboarding:; Ondoarding documentation, like project plan, training material en manual are provided in a digital format, for example as ppt, pdf or through application.; ; Offboarding:; Each transfer allows for the extraction of all data related to an organisation. Every form is exported as a PDF, and all attachments are retained in their original uploaded format.; Besides that, it is possible to realise a one-time dump at additional cost.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Enovation Transfer user interface is intuitive and clear. The UI has been developed to support the professionals in the best way without the need of extensive training sessions.; ; Based on on the user's role different functionality is available.
• Accessibility standards: None or don’t know
• Description of accessibility: Enovation Transfer can be accessed through a link with a username and password, also two factor authentication is available.; ; Single Sign On for professionals can be configured with direct login from a Healthcare Information System/ Electronic Patient Record.; ; Email notifications are send to users when action is required. Through a link in the mail the file can, after login, be accessed.
• Accessibility testing: The interfaces and functionality have been developed and tested in cooperation with healthcare organisations and their staff. Their feedback has been included in the design and functionality.
• API: Yes
• What users can and can't do using the API: Integrations are always established in collaboration with an Enovation integration specialist and mostly with the healthcare information system vendor.
• API documentation: Yes
• API documentation formats: Other
• API sandbox or test environment: Yes
• Customisation available: No

Scaling

• Independence of resources: The service is hosted on our scalable infrastructure and is continuously monitored to ensure the best user experience.

Analytics

• Service usage metrics: Yes
• Metrics types: Standard reports and management information are available both for sent and received transfer files i.e.; - Number of transfer files per month; - Number of transfer files per type of care; - Number of transfer files per location/department; - Files met the discharge date; - Files passed the desired discharge date; - Top 10 sending organisations; - Processing times; -etc.
• Reporting types: Regular reports
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Other
• Other data at rest protection approach: Encryption of database
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Data Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: Users can export a pdf of a transfer file.; Via the reporting options there are standard reports that can be exported, also a dump is available (optional via api).
• Data export formats: Other
• Other data export formats:
  • PDF
  • Xlsx
• Data import formats:
  • CSV
  • Other

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
• Other protection between networks: IP restrictions, in case configured users from the organisation are only allowed to access Enovation Transfer from designated IP addresses. And also multifactor authentication.
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)

Availability and resilience

• Guaranteed availability: The availability of the Provision is 99.6% of the time, measured over a calendar quarter.; ; Availability does not include the time of unavailability due to maintenance, disruptions beyond the Contractor's control.; ; Information on response and resolution objective can be found within the attached SLA.
• Approach to resilience: Enovation has implemented a redundant infrastructure to ensure availability 24 hours a day, 7 days a week, 365 days a year. In case of a calamity within the primary data centre Enovation Transfer will be switched to the secondary data centre minimising the downtime. More information can be shared on request.
• Outage reporting: There is a public dashboard available for offline messages and a Enovation Transfer internal message system for informing users on special occasions.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
  • Other
• Other user authentication: Single Sign On based on SAML or OpenID.
• Access restrictions in management interfaces and support channels: Enovation Transfer is designed to help you meet the highest security expectations. Only designated employees have access to the management interface.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: All knowledge and processes are being documented in a central knowledge base: Information Security Management System (ISMS). The Security Office organise on a yearly basis several workshops to be sure important subjects are clearly explained and ensure up-to-date knowledge. Every department also has at least one member of an internal task force to guard the compliance of the security policies in place. Enovation is accredited for the Data Security and Protection Toolkit (DSPT) and also for Cyber Essentials.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Internal documentation tools are available for documentation. These are remotely accessible to be reviewed by peer colleagues within the company. Additional meetings with different knowledge groups are organised to keep track of the changes and steer on possible risks that might emerge.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Ongoing efforts are made to enhance the software. When new information is supplied by partners, clients, support teams or developers, a risk assessment is made by Product Management and the security office. If the risk is high, this will result in downtime until fixed. If not, the affected parties are informed when deemed necessary and fixes are added to the backlog for the next update. Updates and fixes are not tied to a strict release schedule.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Ongoing efforts are made to debug and assess the software. Internal knowledge sessions and meetings are organised to minimise the chance of overseeing defects. Once something emerges, an assessment is made to assign a time frame for a fix. In case of a large security risk, users will be informed.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: Our service goal is to restore normal service operation as quickly as possible following an incident, while minimising impact to business operations and ensuring quality is maintained. To log an incident users either complete an Incident Logging Form on our support portal or call us on a dedicated support number. Incidents are classified and prioritised based on urgency and impact. A summary is made of all incidents on a regular basis for performance review.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Kiwa
• ISO/IEC 27001 accreditation date: Thursday 16 November 2023
• What the ISO/IEC 27001 doesn’t cover: Our certification includes the development, maintenance and implementation of our own online software services, as well as the implementation and support of third-party software and hardware, remote as well as cloud based and on premises for customers worldwide.
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: Kiwa
• ISO 9001 accreditation date: Thursday 16 November 2023
• What the ISO 9001 doesn’t cover: Our certification covers the development, maintenance and implementation of our own online software services, as well as the implementation and support of third-party software and hardware, remote as well as cloud based and on premises for customers worldwide.
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: F1442509-143b-4d54-8a25-32f8b399abe0
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 73a992d3-328e-4eff-9378-670e20df5aec
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales.uk@enovationgroup.com. Tell them what format you need. It will help if you say what assistive technology you use.