IMPLICITY

Implicity

Implicity is a cloud based platform which aggregates data from the cardiac implantable electronic devices manufacturers websites in an unique platform for remote monitoring of patients implanted with such devices.
The platforms also offers unique artificial intelligence based modules to facilitate treatment and management of the data.

Features

• Data aggregation from the 5 cardiac implantable electronic devices manufacturers
• Artificial intelligence based algorithm for implantable loop recorder episode's reclassification
• Data aggregation from selected external devices
• Research tool with access to raw data
• Personalised alert management
• Electronic health record systems integration
• Report edition
• Action request among users
• Management of disconnected patients
• Management of patient history

Benefits

• Follow all your patients in remote monitoring through one platform
• Leverage the data of cardiac implantable devices for research purposes
• Scale-up your remote monitoring activity
• Decrease the burden of managing disconnected patients
• Decrease the burden of false positives for implantable loop recorder
• Keep full traceability and reporting of medical actions/events
• Monitore patients with multiple cardiology diseases
• Optimise internal workflow
• Productivity gains and time saving
• Update of the electronic health record system

£49.92 a unit a year

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at niels.dachon@implicity.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

404169249005780

Contact

Niels d'ACHON
+33649742164
niels.dachon@implicity.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: The Implicity application is accessible online and supports Google Chrome and Mozilla Firefox browser.
• System requirements: None

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Online chat on the platform with one of our customer success manager form Monday to Friday form 8:00am to 5:00pm (UK Time)
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Web chat
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: The web chat is accessible via a popin in the application
• Web chat accessibility testing: None
• Onsite support: Yes, at extra cost
• Support levels: Implicity has 2 levels of support. ; ; - Level 1 : Customer Success Team. Either via email, phone or chat (accessible on the platform) the Customer Success Team is the main contact of the client for any concerns they may have. They are experts of the platform and understand both medical and technical issues.; - Level 2 : Technical Team. Once the issue has been confirmed by the Customer Success Team, it is the role of the technical team to provide a solution and solve it as soon as possible. ; ; Online support is included in the pricing of the service.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Onsite training is provided, online training is also available as well as user documentation accessible anytime on the platform. ; A customer success manager is always dedicated to a customer, this person is available to continuously support our users.
• Service documentation: Yes
• Documentation formats:
  • PDF
  • Other
• Other documentation formats: URL link
• End-of-contract data extraction: The Customer sends a request to the Customer Success team who will launch a reversibility plan and coordinate with the technical team.
• End-of-contract process: At the end of the contract, Service Provider has established a reversibility plan, Customer will choose between the return or deletion of its data.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Firefox
  • Chrome
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Used by Implicity Support and Administration only
• Accessibility standards: None or don’t know
• Description of accessibility: General Administration for new Medical Centers (Add / edit / deletion); Monitoring backend jobs.
• Accessibility testing: None
• API: Yes
• What users can and can't do using the API: An API is available for interoperability purposes.; it allows import of patient information; import and export medical documents; export of billing documents
• API documentation: Yes
• API documentation formats: HTML
• API sandbox or test environment: Yes
• Customisation available: No

Scaling

• Independence of resources: Our platform is hosted on a AWS and is built with a distributed Kubernetes cluster which provide a high level of scalability

Analytics

• Service usage metrics: Yes
• Metrics types: Our Customer Success team provide on a regular basis reports including the number of alerts received/treated/archived/...; ; Reports can be provided on demand as well and can include other metrics relative to the user's activity on the platform.
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Data sanitisation type: Explicit overwriting of storage before reallocation
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Users export the data through PDF report download, integration to the Electronic Health Record can also be done for automatic export of patients data to his Electronic Medical Record
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • PDF
  • Xlxs
• Data import formats: Other
• Other data import formats:
  • HL7
  • XML
  • PDF

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: Implicity platform is available 24/7. If there is an incident and the platform is unavailable Implicity has to solve the issue within 2 hours (working hours), as part of the SLA and communicate the issue to customers within 3 hours.
• Approach to resilience: Our services use redundancy on AWS to ensure resilience.; our platform is distributed across 3 AWS availability zones and our cluster dynamically manages the ressources to balance between zones.
• Outage reporting: Notification via online chat tool (Crisp) or email when not available

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Username or password
• Access restrictions in management interfaces and support channels: All management and support accounts are invividual named accounts and are governed by role based security to the areas required to perform their tasks
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Public key authentication (including by TLS client certificate)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Bureau Veritas
• ISO/IEC 27001 accreditation date: 28/05/2020
• What the ISO/IEC 27001 doesn’t cover: None
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications: HDS / HDH (Health Data Hosting)

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Implicity is certified under the ISO 27001 standard. This certification involves the implementation of information security policies such as the Information Systems Security Policy and the security manual. Those two documents leads how the information security policies are implemented at Implicity. ; Following that, some procedure have been written such as the secured development procedure, the information access and control policies, the documentation management procedure, the audit procedure, the secure relationship with supplier and others. ; The information security management system is led at Implicity by 3 persons : the CTO in charged of document approbation and decision making, by the security deputy officer who is in charge of the technical implementation of the measures and by the information security management system who is in charge of the process application. ; The rest of Implicity's employee are trained on a regular basis on all the process and audits are made.

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: The change at Implicity is managed by a procedure both wanted by the ISO 27001 procedure.; Depending of the nature of the change it can be either planned or automatic. For most of the important change (subcontractor, software upgrade) we have to decide to implement the change or not. For other things an annual review is made.; First of all, the procedure asks to define the type of change (major or minor) then for major changes, the impact of the change will be identified and action plan will be defined to implement the change.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: As part of the ISO27001 certification, Implicity put in place procedures to detect vulnerabilities. These procedure involve the implementation of a systematic watch (security incident), some audit realization (pentest) and software monitoring. ; Depending of the impacts (or potential impacts) of vulnerability a fix might be done without any delay (time estimation: fix realization and deployment procedure) to fix the vulnerability.
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: Potential compromises can be identify either by regulatory watch, by monitoring, by pentest or by customer information. ; Any potential compromise raise an incident. The incident is then categorize as security incident and/or non compliance (any data breach is classified as both). Any incident classified as one of the categorization bellow will lead to the incident management process which asks for the resolution of the incident but also to define the root cause of it and treat the root cause problem to avoid those incident to happen again. ; Depending on the incident potential impacts the fix can be deployed without delay.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: The non compliance procedure defined the several categorizations of the incident and what actions is needed depending on the level of the categorization. ; Any customer can report an incident either by phone, by mail or using the chat tool. ; Then an incident is created in our system and we categorize it depending of its (potential) impacts. The technical team will work on a fix and in the mean time the customer success team will inform the user of his issue resolution. ; If the incident might have impact on other customer data or use of the platform they are also informed.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Covid-19 recovery:

  Covid-19 recovery

  Implicity is a tool to facilitate remote monitoring of patients with implanted pacemaker and defibrillators. Remote monitoring as been effectively proven for reducing hospitalization rate and ambulatory hospital visits. Thus, the service is helping keeping the patients out of hospital when not necessary. Moreover it allows to decrease the hospital transportation for patients with difficulties and helps save the associated costs.

Pricing

• Price: £49.92 a unit a year
• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: Optional free trial period with full access to our services and solutions, on a limited period of time (To be determined customer by customer).
• Link to free trial: Non Applicable

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at niels.dachon@implicity.com. Tell them what format you need. It will help if you say what assistive technology you use.