mpro5

mpro5

mpro5 platform for digital workflow, automation, internet of things, analytics and real time compliance.

Features

  • Mobile Workflow
  • Workflow Automation
  • Real-Time Analytics
  • Real-Time Alerting by email, SMS, and push notifications
  • Time & Attendance
  • Asset Management
  • National Standard of Cleaning Audits (50 Point Check)
  • Statutory Compliance Performance
  • Directorate Reporting
  • Advisory Services & Support Included

Benefits

  • Ensure statutory compliance by implementing workflows for your processes
  • Increase efficiency by automating stages of your workflows
  • Speed - First workflow ready in 30 days
  • Agility - We adapt your system throughout for you
  • Data Security - Secure and encrypted as standard
  • Data Transparency - Integrate to your systems
  • Directorate Reporting - Share data with your stakeholders

Pricing

£1,995 an instance a month

  • Education pricing available
  • Free trial available

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at luke.jeffrey@crimsontide.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

4 6 8 7 8 9 9 8 3 9 3 4 5 0 1

Contact

mpro5 Luke Jeffrey
Telephone: 01892 542444
Email: luke.jeffrey@crimsontide.co.uk

Service scope

Software add-on or extension
No
Cloud deployment model
Public cloud
Service constraints
Planned maintenance windows are agreed with clients at times of least impact and outside of regular business hours.
System requirements
  • Current and previous version of web browser
  • Current and previous two versions of mobile operating system

User support

Email or online ticketing support
Email or online ticketing
Support response times
Mon-Fri 9am - 5:30pm - 2hr response time

Extended support contracts are available on request.
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
WCAG 2.1 AA or EN 301 549
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
Web chat
Web chat support availability
9 to 5 (UK time), Monday to Friday
Web chat support accessibility standard
WCAG 2.1 AA or EN 301 549
Web chat accessibility testing
None
Onsite support
Yes, at extra cost
Support levels
Our standard support level includes a Customer Account Manager and a Solutions Architect. We also include a Project Manager where appropriate for large-scale deployments.

Additional support is available for training etc as per our standard price list.
Support available to third parties
Yes

Onboarding and offboarding

Getting started
The mpro5 service includes a significant amount of technical advisory services that enable our team to document, communicate, and deliver the agreed success criteria. This normally includes but is not limited to, project kick-off calls, fortnightly project updates, and in-life ad-hoc advisory sessions.
Service documentation
Yes
Documentation formats
  • HTML
  • PDF
End-of-contract data extraction
Mpro5 customers are given access to their data as per our Terms & Conditions at the end of their subscription, this is usually achieved as a single export
End-of-contract process
Export of data to a standardised format is included as part of the contract. Exports of data to numerous and varied formats are available and priced as per the standard consultancy rate in the price list.

Using the service

Web browser interface
Yes
Supported browsers
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
Application to install
No
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
Mobile service is primarily for users to complete the workflows and tasks assigned to them.

Web-based service is for central overview of tasks, reporting, analytics, and configuring the system itself.
Service interface
Yes
User support accessibility
WCAG 2.1 AA or EN 301 549
Description of service interface
We provide both web & mobile interfaces.

Existing libraries adhere to WCAG 2.1 AA standards as a minimum.
Accessibility standards
WCAG 2.1 AA or EN 301 549
Accessibility testing
None
API
Yes
What users can and can't do using the API
User authenticate using credentials to retrieve an access token.
This access token is used to provide access to the Rest JSON API over HTTPS.
The API supports CRUD operations over all main mpro5 functions.
API documentation
Yes
API documentation formats
  • Open API (also known as Swagger)
  • PDF
API sandbox or test environment
Yes
Customisation available
Yes
Description of customisation
Significant amounts of mpro5 can be customised based on user requirements, everything from terminology and language packs, to the contents of workflows, automation steps, and analytics dashboards.

Customisations normally occur by liaising with our configuration team who both advise and assist our users in gaining the desired business outcomes.

Scaling

Independence of resources
Each customer exists in a separate instance of their cloud, meaning that customers are protected from bad actors at all times.

Analytics

Service usage metrics
Yes
Metrics types
Monthly Active Users (MAU)
Reporting types
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Other security clearance
Government security clearance
Up to Security Clearance (SC)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
United Kingdom
User control over data storage and processing locations
Yes
Datacentre security standards
Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency
At least once a year
Penetration testing approach
‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
Protecting data at rest
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
Data sanitisation process
Yes
Data sanitisation type
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
Equipment disposal approach
A third-party destruction service

Data importing and exporting

Data export approach
In-life users can export data from the mpro5 web client if they have permission to do so into an Excel format.

Users may also leverage the mpro5 API to export data to a third party system as required.

At the end of a contract, as per our Terms & Conditions, a full export of mpro5 data is available on request.
Data export formats
  • CSV
  • Other
Other data export formats
  • Excel
  • JSON
  • PDF
Data import formats
  • CSV
  • Other
Other data import formats
  • Excel
  • JSON

Data-in-transit protection

Data protection between buyer and supplier networks
TLS (version 1.2 or above)
Data protection within supplier network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

Guaranteed availability
99.99% Service Level Uptime and Connectivity

Standard Support Terms
2h response time within 9:00am - 17:30pm exc. public holidays

Extended Support
24x7x365 coverage and bespoke support packages are available on request
Approach to resilience
Mpro5 is run on Microsoft Azure's PaaS offering.
https://www.microsoft.com/en-ww/trust-center/product-overview

More information is available on request.
Outage reporting
Email notifications
Direct telephone calls for extended support customers

Identity and authentication

User authentication needed
Yes
User authentication
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
Access restrictions in management interfaces and support channels
Role based authentication and authorisation is implemented throughout mpro5 and our support channels.

User accounts can be restricted based on functionality as well as logical data access.
Access restriction testing frequency
At least every 6 months
Management access authentication
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
User-defined
Access to supplier activity audit information
Users have access to real-time audit information
How long supplier audit data is stored for
User-defined
How long system logs are stored for
User-defined

Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
British Assessment Bureau
ISO/IEC 27001 accreditation date
29/01/2021
What the ISO/IEC 27001 doesn’t cover
None
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Cyber essentials
Yes
Cyber essentials plus
No
Other security certifications
No

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
ISO/IEC 27001
Information security policies and processes
We are ISO27001 accredited incorporating secure development principles, external penetration testing, and leverage security controls via Microsoft Azure's PaaS offering to provide the mpro5 service.

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
Components of services are tracked using standard DevOps pipelines, secure source control, and JIRA change management and tracking.

Changes are documented, agreed, and implemented using the above controls.

Vulnerabilities are monitored proactively using Azure Security Center and Azure Threat Detection.
Vulnerability management type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Vulnerability management approach
Vulnerability assessment and patching for Azure PaaS is provided directly by Microsoft to industry standard established protocols.
Protective monitoring type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Protective monitoring approach
Potential compromises are identified in real-time, patched automatically by Microsoft Azure where applicable, or notified by email in real-time to the support team where not so.

We respond within 2 hours to support requests.
Incident management type
Supplier-defined controls
Incident management approach
We have pre-defined processes for Incidents, Change Requests, and Break/Fix Support all provided by our Support Team.
Users can report incidents via online portal, telephone, or email directly.
We provide full end to end tracing of all incidents including reports made available by the online portal and email.

Secure development

Approach to secure software development best practice
Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

Connection to public sector networks
No

Social Value

Fighting climate change

Fighting climate change

Crimson Tide is committed to fighting climate change and adopted Microsoft Azure as a carbon neutral cloud provider. We continue to work with Microsoft to drive towards the carbon negative commitment.
Covid-19 recovery

Covid-19 recovery

mpro5's leadership team is meeting continuously to assess and appropriately respond to the crisis as it evolves. Of course, everyone’s health and welfare are a priority, mpro5 employees are working from home or in a hybrid working model where appropriate. We have extensive online collaboration capabilities to help ensure business continuity and we’re working tirelessly to help everyone stay safe while at the same time continuing to serve our customers.
Tackling economic inequality

Tackling economic inequality

Social purpose is part of mpro5's fabric. From creating new businesses and new employment opportunities, to improving education and training, mpro5 is committed to tackling economic inequality at root. Our overriding vision is to help lower the unequal distribution of income and increase opportunity between different groups in society.
Equal opportunity

Equal opportunity

mpro5 is fully committed to a work environment and supply chain that is free from human trafficking and slavery.

mpro5 will not tolerate or condone human trafficking or slavery in any part of our organisation.

It is for this reason, that the measures described in our Policy against Modern Slavery have been adopted.
Wellbeing

Wellbeing

mpro5 is committed to the wellbeing of its employees. We offer counselling support, a whistleblower policy, and suitable time for employees to recover from personal events as needed.

Pricing

Price
£1,995 an instance a month
Discount for educational organisations
Yes
Free trial available
Yes
Description of free trial
A free trial version is available to download from the app store.
This includes example workflows but does not support customisation.
Please contact us for specific workflow examples for your use cases.
Link to free trial
Available from iOS App Store, Windows Store, and Google Play Stores by searching "mpro5"

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at luke.jeffrey@crimsontide.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.