EVOTIX LIMITED

Evotix Health & Safety Package For Emergency Services

Evotix offers a proven health and safety solution tailored to Emergency Services. The software supports full risk, audit and incident management, reporting and visibility, a mobile safety app and much more. Engage and boost productivity for your workforce whilst supporting your compliance needs.

Features

• Risk management
• Incident management
• Data analysis through a business intelligence tool
• Approval and review workflows including escalations and notifications
• Reporting at the point of work, online or offline
• Conduct audits on the go
• Create bespoke templates, either site specific or applied company wide

Benefits

• One stop shop for all things health and safety
• Unified reporting based on all health and safety data
• Achieve and demonstrate compliance
• Drive best practice
• Data analysis will help you identify and action improvements
• Full visibility of safety performance
• Improve engagement through a easy to use mobile web app
• Improve engagement through scan and go QR codes to forms

£37,500 an instance a year

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at gcloud@evotix.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

474660532828444

Contact

David Coley
03003033657
gcloud@evotix.com

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: The Assure Health & Safety management solution from Evotix is modular. This means each Assure module works standalone, but integrates powerfully with others to provide you with a complete solution.
• Cloud deployment model: Public cloud
• Service constraints: 99.9% service availability, assured by independent validation of assertion.
• System requirements: None

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: We offer different response times for queries for our standard and premium support offering.; ; For standard support, we provide a 4 hour response time; For premium support, we provide a 3 hour response time.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 A
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Yes, at an extra cost
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: WCAG 2.1 A
• Web chat accessibility testing: N/A
• Onsite support: Yes, at extra cost
• Support levels: Our customers prize our expert and friendly support both during implementation and ongoing. 95% of our customers renew every year. ; ; Our UK based customer services team answer support requests promptly and resolve problems quickly whether they relate to training or configuration. We follow a 6 stage case management process. All cases, issues, or requests for change are, in the first instance, reported to the Help Desk as the central point of contact. ; ; As first line support, the Help Desk can be contacted via our online ticketing service Monday to Friday 8:30-17:30. Requests are recorded and monitored in our case management system which ties the request to your customer account to provide a complete history. Where first line support is unable to solve the customer issue, the case is escalated to second line support. Here, our system experts will work to understand the customer issue and diagnose the problem. Once derived, the solution is communicated to the customer in our outlined SLA. If second line support cannot resolve the customer issue, the case is escalated to third line support for root cause analysis and/or data fix.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Assure has been designed with the user in mind, combining an intuitive consumer style interface with a corporate strength backbone. As a result, it meets business requirements while being straightforward and intuitive to use - not just by experts but by your organisation at large. ; ; We provide users with different training delivery options: our most popular training delivery is online via webinar sessions, specifically for your organisation, and will be tailored for your solution and audience. These can be recorded so you can revisit and reuse them. We also offer interactive video tutorials which can be reused. ; ; Administrator training is delivered organically throughout the implementation process as we collaborate on the configuration of the solution with your project team. We can also arrange dedicated Administrator training, as well as end user training for any modules where this may be required. Our recommended training allowance is 4 hours Administrator training and 4 hours User training, though these numbers can be adjusted to your needs.; ; All licensed users of Assure have access to our Knowledge Base, which contains a variety of help videos and articles.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: The Customer should, no later than ten days after the effective date of the contract end, submit a written request for the delivery of the then most recent back-up of the Customer Data and any attachments that have been uploaded to the system.
• End-of-contract process: If the customer is not renewing they can extract their data via the tools provided or the data extraction can be provided by Evotix at an additional cost.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: AssureGO+ is our next generation Progressive Web Application (PWA) which is ‘mobile first’ but eliminates app installation. The user interface reacts to the device using it so forms and content change to utilize the available screen – tablet, mobile or desktop.; ; Employees/contractors can easily capture hazards, near misses or incidents as well as completing audits, inspections or assessments 24/7, online or offline. If no internet is available, information is stored on the device until it can be synced.; ; AssureGO+ provides access to Assure forms anytime, anywhere on any device with a compatible browser.
• Service interface: Yes
• User support accessibility: WCAG 2.1 AA or EN 301 549
• Description of service interface: Our Service Manager has been developed to provide a consumer level experience for logging Incidents and other Request Types by following a process of Progressive Capture. Progressive Capture is a graphical workflow tool that provides a new and simple way to define the capturing of information. Progressive Capture includes a number of small forms for collecting information related to the Incident. These forms are automatically configured depending on the information being captured.
• Accessibility standards: WCAG 2.1 A
• Accessibility testing: N/A
• API: Yes
• What users can and can't do using the API: Permitted users can utilise the API's separately in an inbound or outbound directly. The APIs are RESTful.; ; The inbound APIs facilitate create, read and update changes to various areas of the systems including master data areas (Organisational Units, Users, registers etc.). The outbound (data extraction) APIs facilitate JSON access to data from almost all of the module forms (e.g., record data); currently, this data is 24-hours behind live data.; ; Data cannot be deleted via the APIs. Note, different APIs have different commercial arrangements and have to be enabled by Evotix.
• API documentation: Yes
• API documentation formats:
  • PDF
  • Other
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Assure combines complete out of the box health and safety functionality (allowing you to be up and running immediately) with an exceptional level of configurability - of forms, organisation, permissions, reports, dashboards, etc. The configurability is controlled by permission settings by user type. This meets all but the most specialist / bespoke requirements and satisfies 99% of customers.

Scaling

• Independence of resources: Real-time monitoring of server load with alerts on critical components EG. CPU load, memory load, throughput. Application servers are load balanced.

Analytics

• Service usage metrics: Yes
• Metrics types: User activity (log in, log out etc.). Record creation stats.; Customers can access system and records logs independently too.
• Reporting types: Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
• Protecting data at rest:
  • Encryption of all physical media
  • Other
• Other data at rest protection approach: All data is encrypted at rest while being stored in Physically protected Datacentres
• Data sanitisation process: Yes
• Data sanitisation type: Explicit overwriting of storage before reallocation
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Users can download their data in a variety of ways:; ; • On individual records; in formatted reports (Word, PDF, CSV); ; • On multiple records; using configurable (logic) filters and configurable tabular CSV/JSON reports. Additionally, via the integrated BI tool (Insights+) in PDF, CSV, Excel, JPG formats.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • JSON
  • Microsoft Word
  • Microsoft Excel
  • PDF
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • JSON
  • Inbound API
  • Attachments (except those that may be potentially malicious)

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Other
• Other protection within supplier network: IP restricted access

Availability and resilience

• Guaranteed availability: 99.9% uptime, scheduled and notified maintenance schedules, clawback in contract
• Approach to resilience: The service is deployed across multiple datacentres to ensure that even the failure of a datacentre will not interrupt service provision.
• Outage reporting: Public status page which can be subscribed to for email alerts.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Identity federation with existing provider (for example Google Apps)
  • Other
• Other user authentication: Authentication via Single Sign On is available either natively or if the customer brings their own SSO Provider which supports the WS-Fed and SAML Protocols. Each user’s username must be unique.
• Access restrictions in management interfaces and support channels: Access is only available via VPN with MFA from a Whitelisted IP Address.
• Access restriction testing frequency: At least once a year
• Management access authentication: Dedicated link (for example VPN)

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: QSL
• ISO/IEC 27001 accreditation date: 19/06/2023
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Evotix holds and maintains a full ISO 27001 compliant and certified Information Security Management System.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Evotix has an ISO 27001 compliant Change Management Process in place.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Tools are in place to allow continuous monitoring for vulnerabilities with patching regimes keeping software current. Where vulnerabilities are identified they are risk assessed and scheduled for remediation based on the assessed level.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Systems are automatically monitored with abnormal behaviour identified and notified to the SecOps team for investigation.
• Incident management type: Supplier-defined controls
• Incident management approach: Evotix's incident management process is assessed annually as part of Evotix's ISO 27001 certification.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Wellbeing

  Fighting climate change

  Our solution offers the ability to track and report carbon emissions. Using this information customers can identify solutions to reduce their emissions.

  Covid-19 recovery

  Our solution is being used nationally to deliver valuable skills and training to communities, helping to get more people back into work post the COVID-19 Pandemic.

  Tackling economic inequality

  Our solution is being used nationally to deliver valuable skills and training to communities, helping to get more people back into work post the COVID-19 Pandemic.

  Wellbeing

  We have a wellbeing toolkit, delivered through GLOW that provides a wellness and wellbeing framework from which to assess and diagnose areas of strength and weakness around mental health and general wellbeing.; ; GLOW contains tools, advice and resources for users to address potential issues and create more resilience in this space, helping them be fit for work.

Pricing

• Price: £37,500 an instance a year
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at gcloud@evotix.com. Tell them what format you need. It will help if you say what assistive technology you use.