HUMA THERAPEUTICS LIMITED

GDm-Health

GDm-Health is a remote monitoring platform for people with diabetes in pregnancy. GDm-Health enables patients to record blood glucose levels (tagged with their meal times and medications) using a smartphone app, and enables clinical teams to review these readings in real time in order to inform clinical decision-making.

Features

• Widely used: 66+ NHS trusts and 100K patients using GDm-Health
• Highly intuitive and easy-to-use for patients and clinicians
• Patient blood glucose readings tagged by meal type and medications
• Clinical teams view patient readings in real-time in charts
• Bluetooth connectivity with leading blood glucose meters
• Patients can request call back from clinical team easily
• Patient app training videos available on YouTube in 10 languages
• Unlimited clinician users and sites per trust
• Audit logs enable multidisciplinary teams to safely manage patients
• App is free on App Store and Google Play

Benefits

• Release capacity - GDm has reduced diabetes appointments by 47%
• Faster treatment optimisation - GDm has 21% faster time-to-treatment
• Highly valued by users - 100% patient satisfaction
• Improve safety - 42% reduction in preventable C-sections
• 16% reduction in women requiring pharmacological treatment
• Improve compliance - 31% improvement in BG monitoring compliance
• Enhance safety - 64% reduction in pre-term births
• Educational support for self-management
• Messaging capability for clinicians
• Cloud based - easy to deploy for the NHS

£9,500 to £29,500 an instance a year

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at karanjit.aujla@huma.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

433113514032469

Contact

Karanjit Aujla
+447783071855
karanjit.aujla@huma.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: The Clinician Portal is accessible from any device via standard internet access and is compatible with the following web-browsers (most recent version and one previous version of each web-browser are supported): Chrome, Firefox, Safari, Opera, Electron and Microsoft Edge.; ; The GDm-Health patient app is available in UK app stores for both iOS (Apple) and Android. The app supports Android version 6 and above and iOS 13 and above. If a patient does not have an iOS or Android device, they will not be able to download the GDm-Health patient app.
• System requirements:
  • Clinician Portal available on all major web-browsers
  • Patient App available on Android and iOS smartphones

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Ongoing support is provided via the support.diabetes@huma.com and through our embedded conversation tool (powered by Intercom).; ; Huma’s resolution times are generally <2 hours for queries within working hours.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 A
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Web chat
• Web chat support availability: 9 to 5 (UK time), 7 days a week
• Web chat support accessibility standard: WCAG 2.1 AA or EN 301 549
• Web chat accessibility testing: Huma undertakes web-chat testing with assistive technology users as part of it's compliance to WCAG 2.1 standards
• Onsite support: Onsite support
• Support levels: Huma provides both initial on-boarding support and readily available ongoing support.; ; Onboarding support includes a training session for the ‘Super Users’ and ‘Admins’ at each Trust, followed by a User Acceptance Testing session wherein clinician users of the GDm-Health platform walk through a structured checklist and ensure that they know how to utilise every functionality of the app and portal. ; ; Ongoing and technical support is provided via the support.diabetes@huma.com email address and through an embedded conversation tool within (powered by Intercom).; ; Huma’s resolution times are <2 hours for most queries.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Huma provides both initial on-boarding support and readily available ongoing support..; ; Onboarding support includes a training session for the ‘Super Users’ and ‘Admins’ at each Trust, followed by a User Acceptance Testing session wherein clinician users of the GDm-Health platform walk through a structured checklist and ensure that they know how to utilise every functionality of the app and portal. ; ; Ongoing and technical support is provided via the support.diabetes@huma.com email address and through an embedded conversation tool within (powered by Intercom).
• Service documentation: Yes
• Documentation formats: HTML
• End-of-contract data extraction: All data can be exported from the Clinician Portal at any time through the export feature.
• End-of-contract process: At the end of a contract, Huma works with the client to agree a full handover process.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The Patient App is available on Android and iOS devices.
• Service interface: Yes
• User support accessibility: WCAG 2.1 A
• Description of service interface: Huma’s GDm-Health platform connects patients with gestational diabetes and their clinical teams, facilitated by real-time visualisation of data, without recourse to face-to-face appointments. Huma’s technology comprises a smartphone Patient App (available on Android and iOS) and a web-browser based Clinician Portal.
• Accessibility standards: WCAG 2.1 A
• Accessibility testing: Huma works with assistive technology users to complete interface testing as part of our compliance to WCAG 2.1 standards
• API: No
• Customisation available: No

Scaling

• Independence of resources: GDm-Health is supported by Microsoft Azure. The platform undergoes frequent load testing to ensure users aren't affected by the demands of other users.

Analytics

• Service usage metrics: Yes
• Metrics types: Huma's analytics platform provides insights into platform usage. Typical standard usage metrics that can be reported include, for example: number of user / patient registrations, number of active users / patients, time spent using the Clinician Portal, user / patient gender comparison, user / patient age comparison, usage per App data collection module. This data can be analysed over various time periods.
• Reporting types:
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: No
• Equipment disposal approach: In-house destruction process

Data importing and exporting

• Data export approach: Users can export all data directly from the Clinician Portal at any time.
• Data export formats: CSV
• Data import formats: Other
• Other data import formats:
  • Manual health data through Patient App
  • Through connected medical devices (Agamatrix WaveSense Jazz, Contour Next One)

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Target Uptime – subject to the exclusions set out below, Huma shall aim to make the Software Solution available 24 hours per day, 7 days per week, 365 days per Year at the below service availability levels.; ; Service Availability – 99.5%, measured on a Quarterly basis.; ; The following shall not be included in the calculation of service availability: (i) outages, disruption or downtime caused by the Client; (ii) a Force Majeure event; or (iii) Scheduled Downtime.
• Approach to resilience: The platform is hosted on UK based cloud servers provided by Microsoft Azure. All data is backed-up and stored in line with national standards and policies.
• Outage reporting: Any interruptions to the service are communicated to all users via Intercom support platform.

Identity and authentication

• User authentication needed: Yes
• User authentication: 2-factor authentication
• Access restrictions in management interfaces and support channels: All API's require the user to have authenticated
• Access restriction testing frequency: At least every 6 months
• Management access authentication: 2-factor authentication

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: BSI
• ISO/IEC 27001 accreditation date: 01-02-2021
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications:
  • NHS England Data Security and Protection Toolkit - Standards Exceeded
  • CE mark (MHRA registration number CA013882)
  • Information Commissioner registration (ZA078203)
  • ISO13485 certified

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: The information security policies and processes are all contained within the company Quality Management System and Technical Files. This includes the information security policies and processes that satisfy the requirements for the Information Governance Toolkit produced by the Department of Health (DH) and hosted by the Health and Social Care Information Centre (HSCIC). Huma's Quality Representative ensures that these policies and conveyed to the company. The Quality representative reports to Huma's Executive Leadership Team, including board-level person(s) responsible for service security. The processes include periodic audit, penetration testing - where appropriate, the results of these are reported to the Executive Leadership.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: All configuration is managed in our source repository which gets reviewed and versioned prior to release
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Huma servers are patched monthly and we can deploy critical fixes within 12 hours after going through integration testing
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Huma deploys various forms of integration tests which ensure the API is fit for purpose and can deploy fixes within 12 hours
• Incident management type: Supplier-defined controls
• Incident management approach: Huma follows a lightweight ITIL Incident management process

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Huma’s Environmental, Social, and Governance (ESG) framework is an executive-level programme and our board and staff are strongly committed to reducing carbon emissions across our business. We partner with Supercritical – a leading carbon removal platform to help accelerate our climate journey. Supercritical ranked Huma in the Top 100 UK companies leading the charge on climate change. Through this partnership we have established a number of initiatives to influence staff and suppliers to help us fight climate change, and contribute to supporting the NHS achieve its net zero target by 2045: - Measuring climate impact and commitment to net zero by calculating reductions in carbon emissions across all business activities - Improving our energy efficiency across the company - Measuring impact on air and water pollution - Being mindful and purposeful in our waste management practices - Impact on biodiversity - Limiting use of plastics

  Covid-19 recovery

  Huma has been supporting NHS recovery from COVID-19 by using our remote patient monitoring platform to release clinical capacity, prioritise waitlists and help patients pre/post operatively recover from surgery.

  Tackling economic inequality

  We are involved with a number of community partnerships to help tackle economic inequality. Our platform is helping democratise access to the NHS services by removing barriers for people to engage with their health (e.g. travel).

  Equal opportunity

  To create equal employment and training opportunities, particularly for people facing barriers to employment, we work in line with the Equality Act 2010. Ensuring equality throughout our operations, our employee handbook covers D&I. The handbook is applicable to all employees.

  Wellbeing

  Huma provides a number of wellbeing benefits to our staff, which are included in our Employee Handbook.

Pricing

• Price: £9,500 to £29,500 an instance a year
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at karanjit.aujla@huma.com. Tell them what format you need. It will help if you say what assistive technology you use.