ORGVUE LIMITED

Orgvue: HR Analytics, Organisation Design, Strategic Workforce Planning, Transformation & Mergers

Orgvue is the leading software platform for organisation design, organisation transformation, workforce planning, agile organisations and mergers. Orgvue enables consolidation, cleaning and visualisation of workforce data to analyse your organisation for informed business decisions, revolutionising how you see, design / model, plan and monitor your organisation and Establishment.

Features

• Data integration and cleansing: Merge multiple sources for modelling, planning.
• HR analytics: See organisation new way, new insights, better improvements.
• Organisation design: Model and compare scenarios for your future organisation.
• Transformation management end to end, including implementation & benefits tracking
• Workforce planning: close supply / demand gap and track actuals.
• Competency: understand skills you have and need for futurer roles
• Merger management: Merge organisations faster and achieve better outcomes.
• Ongoing organisation effectiveness & health monitoring and continuous change.
• Surveys: crowd source skills & activity data, new insights, planning
• Collaboration: teams work & plan on same data simultaneously, securely.

Benefits

• Transform strategic HR: centre of excellence, more value to business.
• Consolidate and clean organisation data, enhance data in source systems.
• Accelerate, reduce cost in workforce planning & OD through workflows.
• Future proof your organisation and plan more flexibly for change.
• Organisational Planning and Analysis: best practice strategic workforce management, OD&D.
• Talent planning: to optimise skills, retention and recruitment.
• Set org targets & guardrails, track progress through the organisation.
• Implement, operationalise and track your strategic workforce plan.
• Story telling through regularly refreshed data and auto-generated reports.
• Fewer major projects & disruption through continuous monitoring & evolution.

£65,000 to £9,999,999 a unit

Service documents

• Pricing document

  ODT

• Service definition document

  ODT

• Terms and conditions

  ODT

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at mike.smith@orgvue.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

426303922263495

Contact

Mike Smith
+447887673963
mike.smith@orgvue.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: None
• System requirements:
  • PC with dual core processor with minimum 8GB RAM.
  • Broadband internet access
  • Windows desktop browser: Chrome or Microsoft Edge (latest versions).
  • For exporting: Microsoft Excel and PowerPoint 2013 or greater.

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Orgvue support desk is staffed Monday-Friday from 0900-1700 (excluding Bank Holidays)
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Technical help desk, online resources & videos, customer success manager and Orgvue community events all provided with Orgvue subscription at no additional cost.; ; Specialist advisory services and technical account management services available at additional cost, scoped to suit individual customer needs.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Orgvue can be used from day 1 of your Orgvue tenant being available.; The Orgvue team will:; - Set up automated as-is data refresh, user permissions and in-scope Orgvue functionality; - Define, configure and train in customer specific use cases; - Provide trainer led training for specific functionality / use cases; - Provide platform administration training so you are self sufficient in managing your Orgvue tenant; - Online documentation, FAQs, videos and help resources; - Ongoing support through technical help desk and customer success manager
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Easy to extract data from Orgvue to CSV, PPT and PDF, subject to user permissions, to extract all data and visuals required.
• End-of-contract process: No additional cost at end of contract, assuming you remove all the data that you require. You will be trained how to do this at the outset and our technical help desk can advise.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Chrome
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: The Orgvue application and configuration is accessed through web browser.
• Accessibility standards: None or don’t know
• Description of accessibility: Orgvue is progressing its accessibility, has made progress and is going further:; - 3rd party accessibility specialist, Deque, has done an accessibility audit; - Implemented software to check automatically all new deployments into Orgvue, which picks up ~80% of accessibility issues which are then addressed; - Trained dev and test teams in accessibility so that is built in to new developments from the outset; - Already addressed 50% of the critical issues raised in the audit; - Plan further audits to assess progress and shape the next set of priorities in Orgvue’s WCAG journey
• Accessibility testing: Independent Deque audit.
• API: Yes
• What users can and can't do using the API: Customers can push data into and pull data with various filters from Orgvue using Orgvue's APIs
• API documentation: Yes
• API documentation formats: PDF
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Orgvue is front end user interface operated and managed.; Customers can create their own analysis, reports and workflows to suit many custom use cases.; This is front end configuration, not coding / back end customisation.

Scaling

• Independence of resources: Orgvue works primarily on the user's browser utilising the resources of their local PC. Orgvue opens data sets and saves them back to the Orgvue server. While workforce datasets can be complex they are not high volume in data terms. This architecture enables a high number of concurrent users without impacting individual performance.

Analytics

• Service usage metrics: Yes
• Metrics types: Orgvue can provide usage data: number of users and frequency of activity.
• Reporting types: Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Easy to select and export data to CSV, PPT or PDF, subject to user permissions.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • TSV
  • Powerpoint PPT
  • PDF
• Data import formats:
  • CSV
  • Other
• Other data import formats: Excel XLS

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Software Service is provided with a 99.5% uptime service availability level.; Orgvue is histed on resilient AWS infrastructure and in practice Orgvue is highly available.; Orgvue does not offer refunds, not been and not forseen to be an issue given demonstated availability.
• Approach to resilience: Orgvue is hosted on AWS with all the benefits of resilience, backups etc that AWS provides.
• Outage reporting: Orgvue publishes availability online.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Username or password
  • Other
• Other user authentication: Single Sign On
• Access restrictions in management interfaces and support channels: Orgvue has a strong flexible user role permissions management capability enabling application of role based access control (RBAC) and attribute based access control (ABAC)
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Username or password
  • Other
• Description of management access authentication: Single Sign On incorporating your password and authentication policy

Audit information for users

• Access to user activity audit information: You control when users can access audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: You control when users can access audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: BSI
• ISO/IEC 27001 accreditation date: 25/04/2023
• What the ISO/IEC 27001 doesn’t cover: Certificate states it covers the following scope "The provision of data analytics products using software as a service, with associated consulting services. This is in accordance with the Statement of Applicability dated 7th July 2022"
• ISO 28000:2007 certification: No
• CSA STAR certification: Yes
• CSA STAR accreditation date: 21/07/2023
• CSA STAR certification level: Level 3: CSA STAR Certification
• What the CSA STAR doesn’t cover: Certificate states it covers the following scope "The provision of data analytic products using software as a service, with associated consulting services in association with ISO 27001 certificate IS 6"
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications:
  • SOC 2 Type 2 Report
  • ISO 27018

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • CSA CCM version 3.0
  • ISO/IEC 27001
  • Other
• Other security governance standards: CSA Star; SOC 2 Type 2 Report; ISO 27018
• Information security policies and processes: Orgvue has a formal Information Security Policy and maintains a suite of information security policies which form the foundation of our Information Security Management System (ISMS). These policies are reviewed annually and available for download from the Trust Center at https://trust.orgvue.com; Orgvue follows the ISO 27001, ISO 27018, CSA Star and SOC 2 Type 2 standards for information security reporting and management, alongside the independent auditing associated with these standards.

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: Orgvue software development security is governed through the Orgvue Software Development Policy and Orgvue Development and Releases Processes document. Software development methodology is aligned to OWASP principles for secure development.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: Qualys Cloud Agent and Amazon Inspector are installed on all AWS EC2 instances. Vulnerability scans are continuous via Qualys Cloud Agent. These scans are formally reviewed at least weekly by the Information Security team and include web application scanning in combination with OS level scans. The Qualys Cloud Agent solution is implemented across the Orgvue organization, including the Orgvue AWS, corporate server and workstation environments, providing near real-time vulnerability information.
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: At the network level, the AWS GuardDuty service is active within the AWS Orgvue environment. AWS GuardDuty is a threat detection service which uses machine learning, anomaly detection and integrated threat intelligence to identify potential threats. GuardDuty spans the entire VPC.; ; GuardDuty, operates within the AWS cloud analyzing DNS requests, VPC traffic flow and CloudTrail events.; ; GuardDuty’s functionality is similar to that of a Network IDS and uses a hybrid approach to detection, meaning it analyses traffic for signature matches as well as monitors for deviations from baseline activity.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: Orgvue commits to notify customers of security incidents which may impact their data within 24 hours. This is formalized in the standard terms and conditions for Orgvue.; ; Orgvue has an established Incident Management process incorporating root cause analysis and corrective action remediation. Incident Managers have direct access to Executive leadership to ensure all appropriate resources are available.; Security incidents are managed through the Orgvue Incident Management Policy and Orgvue Security Incident Handling Policy.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  We recognise that our activities have a direct impact on the environment and we aim to promote environmental awareness amongst our employees to limit such an impact.; Whilst as a SaaS business whose software is hosted at third party data centres, our environmental impact is relatively limited. We also recognise our employees can take actions to minimise environmental impact and reduce our carbon footprint. At Orgvue, we are passionate about the environment and make sure we take concrete action to reduce the production of waste and promote recycling wherever possible, we utilise all natural resources, such as water, energy and paper in the most efficient way and promote the use of public transport limiting private travel via car and / or plane wherever possible.; ; See "Environmental Pillar" scetion of Orgvue Environmental, Social and Governance Statement at https://www.orgvue.com/legal/environmental-social-and-governance-statement/

  Equal opportunity

  Through employee engagement surveys and focus groups we actively listen to our people and work together to take action on things that matter to them. We strive to achieve a diverse and inclusive environment where people feel they can bring their whole self to work. Our celebration of Pride month included sharing of personal stories volunteered by employees identifying as LGBTQ+ to raise a deeper awareness of the issues impacting them. We are extremely proud of our active Black Lives Matter employee-led forum, which leads on initiatives such as the celebration of Black History Month.; ; As a data-led Company we, naturally, continually measure our workforce demographic including gender diversity, employee engagement and attrition data.; ; See "Social Pillar" section of Orgvue Environmental, Social and Governance Statement at https://www.orgvue.com/legal/environmental-social-and-governance-statement/

  Wellbeing

  Fostering a culture of openness, collaboration and respect is key at Orgvue. We value our people’s wellbeing having recently launched the Orgvue Wellbeing Programme with a suite of physical, mental and emotional wellbeing initiatives such as mental health webinars, virtual yoga classes and free corporate membership of the mindfulness app, Headspace. Our working environments are not only health and safety compliant, they are designed with fun and creativity in mind with employees regularly making use of our café bar, pool table and ‘writable’ walls.; ; See "Social Pillar" section of Orgvue Environmental, Social and Governance Statement at https://www.orgvue.com/legal/environmental-social-and-governance-statement/

Pricing

• Price: £65,000 to £9,999,999 a unit
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  ODT

• Service definition document

  ODT

• Terms and conditions

  ODT

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at mike.smith@orgvue.com. Tell them what format you need. It will help if you say what assistive technology you use.