AURION LIMITED

PeopleFluent LMS

Specifically designed for regulated compliance environments, PeopleFluent LMS offers a broad range of features to manage online and classroom-based learning. PeopleFluent LMS also offers advanced tiers to support talent and performance management initiatives.

A flexible and scalable solution that is configured to exactly meet your requirements.

Features

• Secure SaaS deployment to provide an easily accessible solution.
• Enterprise level functionality with enhanced administrative capabilities.
• Blended learning capabilities including ILT session management.
• SCORM and AICC compliant.
• Robust reporting: 150+ standard reports; Report Wizard for custom reports.
• Built-in exam engine for assessments and evaluations.
• Certificate builder with manual and automated certification processes.
• E-commerce functionality.
• Open and flexible API framework.
• Offers Talent Slate app for learning on the go.

Benefits

• Meet compliance and regulatory requirements.
• Support talent and performance management in your organisation.
• Create, host and track online learning and classroom training.
• Seamlessly integrate with other systems in your environment.
• Measure business impact.
• Support team collaboration and social learning.

£10 to £27 a user a year

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@aurionlearning.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

487830071201156

Contact

Rebecca McClarty
028 9064 3211
tenders@aurionlearning.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: PeopleFluent LMS is a reliable solution, available 24/7, with an uptime of 99.5%, measured on an annual basis and excluding scheduled maintenance windows.; ; The PeopleFluent LMS SaaS Services team utilises a short monthly maintenance window, outside of standard working hours, to undertake essential performance and security updates on all SaaS servers.
• System requirements:
  • Latest stable release of Microsoft Edge, Firefox and Chrome
  • Supports Safari in accordance with Apple’s support policy
  • Supports Microsoft Internet Explorer in accordance with Microsoft's support policy

User support

• Email or online ticketing support: Yes, at extra cost
• Support response times: Response tracking using the online Aurion Support tool, where clients can raise and track tickets. All bugs fixed free of charge. Change controls prepared for any work over 0.5 day in duration. We offer email and telephone support (9:30am – 5pm, Monday to Friday). Response times depend on the assigned severity level and will be agreed and documented in a signed Service Level Agreement. Typical response time is 1-4 working days. depending on priority of the request.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: No
• Support levels: Aurion enters into a tailored Service Level Agreement (SLA) for every LMS/LXP deployment. The SLA will be agreed, documented and signed off by the client team. The SLA documents the scope of the support services to be provided, severity levels and associated response times, along with any exclusions and our exit management plan. We offer three tiers of support package: ; Standard: Up to 25 hours’ support per annum.; Enhanced: Up to 50 hours’ support per annum. Up to 10 hours of unused support can be carried into the next year if an additional year of support is purchased.; Custom: Number of hours agreed with client. Up to 20% of unused support can be carried into the next year if an additional year of support is purchased.; The scope of our support service covers reactive front-line support for key client personnel and end users (end user support included in custom tier only), account management (including regular review meetings - included in enhanced and custom tiers) and system maintenance.; Associated costs are included in our pricing document.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Aurion follows a documented 5-stage process for our LMS deployments.; We start by providing the client team with a Training Workshop (typically online) on the white-label deployment of PeopleFluent LMS. This provides the client team with a good understanding of the available features and how they can be used effectively with the organisation.; We follow the training with a series of configuration workshops with our LMS Specialist and Project Manager, where we agree the feature set to be deployed in the final LMS version and agree on the required feature configuration for key areas of the system, such as required user roles and permissions.; We conduct user testing and refinement of the proposed LMS set up before providing detailed training for identified LMS administrators. Tailored user documentation is also provided.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Users can extract their personal training data from the system at any time during the contract. The data can be downloaded in XML format for migration to an alternative LMS.
• End-of-contract process: At the end of the contract, Aurion provides the client with the exported training data for all users in the system in the agreed format. Once the client has confirmed receipt of the data, we delete and decommission the LMS instance. All data on our systems and servers is deleted on a date agreed with the client team.; ; Copies of online databases and file stores are securely deleted per PeopleFluent’s formal Data Retention, Destruction and Hardware Disposal Policy. Retired or replaced media is sanitized to NIST 800-53 specifications before it is discarded or reallocated. PeopleFluent will certify deletion upon request. There is no additional charge for end of contract data deletion.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: As PeopleFluent LMS is web-based, the full range of functionality is available on any device with a standard browser. There is a smartphone-optimised interface; however, in order to benefit from the wide array of administrative capabilities, we recommend the desktop service.; ; The LMS's companion mobile app, Talent Slate, is a fully responsive, native mobile learning app for iPad/Android tablets, iPhones and Android smartphones. It is primarily tailored towards learner accessibility with both online and offline capabilities. It can also be used by managers for task approval and on-the-job assessments.
• Service interface: Yes
• User support accessibility: WCAG 2.1 A
• Description of service interface: PeopleFluent LMS has a User Interface and a web-based API for external applications to integrate with the LMS. Aurion Learning can also develop custom top-level portals to provide additional functionality and UX design.
• Accessibility standards: WCAG 2.1 A
• Accessibility testing: We always strive to meet or exceed WCAG 2.0 AA standards. To ensure this, we test all visual design and color choices to ensure proper contrast for readability, as well as ensuring text alternatives are available to non-textual elements.
• API: Yes
• What users can and can't do using the API: PeopleFluent LMS offers a powerful set of APIs allowing clients to share and present information from the LMS through other third party systems. The SDK and the LMS connectors can be used to connect to, communicate with and/or embed LMS functionality into many different web and application environments, including: almost any corporate or custom portal, enterprise applications of various types (e.g., SAP FI/CO), SuccessFactors, social networking applications, Microsoft Sharepoint (through Google Gadgets and persistent URLs), WordPress/Buddy Press (through Google Gadgets and WordPress widgets), IBM connections (through Google Gadgets and persistent URLs), payment gateways, and more.; ; Of particular note is the ability to present key information from the LMS through a web interface such as a learning hub or portal. Aurion has a particular specialism in using APIs to present key information through the addition of HTML5 pages within the user interface of the LMS – offering tailored page design seamlessly to learners in addition to standard LMS pages.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: PeopleFluent LMS is a highly configurable system. Configuration options define everything from areas such as menus to the ability to add fields to users and courses. Customisation within the LMS typically involves changes to specific workflow. ; ; Aurion can also support clients with more advanced customisation of the user frontend to enhance the user experience.; ; Clients can use the PeopleFluent Product Roadmap Portal to make requests for new functions and features. This portal also provides visibility into future plans, and what’s been launched.

Scaling

• Independence of resources: PeopleFluent LMS is designed for scalability, effectively providing the capacity for unlimited growth potential.

Analytics

• Service usage metrics: Yes
• Metrics types: Aurion provides service metrics in the form of reports as part of our Enhanced and Custom support packages. Enhanced Support: • One six-month online support review call between the Aurion Client Account Manager and client representatives to review and feedback on the overall management of the project. • Quarterly progress report / support ticket report to highlight trends and identify opportunities for improvement or new features. Custom Support: • As above plus one Steering Group meeting between the Aurion Client Account Manager and client representatives to review and feedback on service provision and the overall management of the project.
• Reporting types: Regular reports

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: PeopleFluent

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Besides basic import/export of data using CSV or XML files manually through the interface or through SFTP, PeopleFluent LMS can expose its data via an Application Programming Interface (API). The API is HTTP-based, and makes use of widely-supported web data formats such as XML, JSON, Atom, and RSS. It is intended to conform to the design principles of Representation State Transfer (REST).
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • PDF
  • HTML
  • XLS
  • XML
• Data import formats:
  • CSV
  • Other
• Other data import formats: XML

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: Aurion provides a tailored SLA for all LMS clients that guarantees initial response and resolution times, dictated by four levels of priority.; ; The stated uptime of the PeopleFluent LMS is 99.5% measured on an annual basis and excluding scheduled maintenance windows.
• Approach to resilience: The PeopleFluent LMS SaaS offering is delivered through hosting infrastructure that is committed to the highest level of resilience and redundancy. Details of Aurion Learning and PeopleFluent backup and disaster recovery plans are available upon request.
• Outage reporting: Aurion provides email notification to system administrators for certain unplanned outages. The schedule of planned maintenance of the System shall be published on the Aurion Learning password protected Project Management website, Basecamp.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Username or password
  • Other
• Other user authentication: Native login authenticates with username and password. Alternatively the solution supports SAML 2.0 token authentication via SSO / MFA.
• Access restrictions in management interfaces and support channels: PeopleFluent leverages MFA and/or other forms of strong authentication for all sensitive system access. Secure SSL VPN / Two-Factor Authentication is required for remote connectivity. System and application accesses are granted on a least privilege basis. Access to production is reviewed quarterly, and controls are SSAE-18 SOC 2 audited.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: You control when users can access audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications:
  • PeopleFluent hold ISO/IEC 27001 certification (accredited 29/05/2020 by A-LIGN)
  • PeopleFluent are EU and Swiss Privacy Shield certified.
  • PeopleFluent are SSAE-18 SOC 2 audited.

Security governance

• Named board-level person responsible for service security: No
• Security governance certified: No
• Security governance approach: Aurion holds Cyber Essentials certification and is working towards ISO27001 accreditation. PeopleFluent LMS is ISO27001 certified.; ; Aurion maintains a Business Continuity Plan and Disaster Recovery Plan. These plans are reviewed annually and itemised on the agenda of the Annual Quality Management Review Meeting. Additional interim reviews are undertaken at Monthly Management meetings, which follow on from External ISO Quality audits at 9 months and a twice-yearly internal ISO Quality Audit.; ; All updates and improvements to these plans must be approved by the Aurion Board of Directors prior to adaption and implementation.
• Information security policies and processes: With ISO 27001 certification, multiple datacentres in key locations worldwide, client data compartmentalisation to address data privacy controls, transactional security, and a variety of other advanced security features, PeopleFluent LMS uses one of the most Secure SaaS architectures on the market today.; ; In addition, Aurion implements an Information Security Policy (available on request), which aims to protect the company’s information assets from all threats, whether internal or external, deliberate or accidental, to ensure business continuity, and to minimise business damage. The policy helps us to:; • Reduce the risk of IT related problems; • Plan for problems and deal with them as they arise; • Provide continuity of work if a problem occurs; • Keep safe valuable company information; • Fulfil professional obligations to clients ; • Comply with legal statutory requirements of General Data Protection Regulations and other legislative requirements; ; The policy outlines the responsibilities of our Data Compliance Manager, IT Manager and the wider Aurion team in relation to information security, including measures relating to hardware and software security, data transfer, email, remote working, etc. ; ; All new starts are required to read and accept the Information Security Policy, with regular refresher training provided to staff.

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: Changes to production are subject to formal change control process and approval by Production Change Board. Change Management is audited as part of the annual SSAE-18 SOC 2 audits.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: PeopleFluent has formalized processes for application and infrastructure-level vulnerability testing and remediation. PeopleFluent follows industry sources for vulnerability announcements, and utilizes vulnerability scanning and centralized patch management solutions to register and enforce deployment of authorized patches.
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: Extensive logging and monitoring processes and tooling provide alerting on anomalous activity. PeopleFluent maintains an on-call rotation among its systems and operations engineers who have responsibility over infrastructure and applications respectively. The on-call engineer receives notifications from PeopleFluent monitoring systems and will act upon any Severity 1 or Severity 2 outage immediately.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: PeopleFluent's incident response process defines the stages of the incident life cycle (including identification, assessment, response, and recover); ensures appropriate engagement of cross-functional stakeholders, executive management, and specialized external resources; ensures that PeopleFluent fulfills all legal, regulatory, and contractual notification requirements. ; ; Aurion also maintains our own incident management procedures (available on request). Clients can report incidents by email or using the Aurion Support tool. Response times depend on the assigned severity level.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  Fighting climate change

  Fighting climate change

  Aurion is committed to implementing strategies that promote protection of the environment, avoid waste and support sustainable business activities. Our commitment to the local community and environment has been recognised through awards including a commendation from Business in the Community Northern Ireland for Most Responsible Small Business.; Aurion maintains an Environmental Policy, which is reviewed and updated annually by our Board. The policy is aligned with our Business Plan, which focuses on 5 of the UN Sustainable Development Goals, including Infrastructure and Climate Action. Our annual Action Plan documents and tracks progress against each of the 5 Goals per annum. All new staff are required to review our Environmental Policy in their induction, and annual carbon literacy and environmental awareness refresher training is provided to all staff. ; Aurion has signed up to the Climate Action Pledge in association with Business in the Community Northern Ireland. This helps us to benchmark our sustainability initiatives and provides verifiable measures for reductions in greenhouse gas emissions, energy use, resource consumption and waste. ; We have a number of internal initiatives in the area of sustainability that are incorporated into our business policies as part of our ISO 9001:2015 accreditation. These include a cycle to work scheme for all staff with tax incentives, and regular CSR activities targeted at supporting the local environment and community, including volunteering with local charity, Storehouse Belfast.; Additional initiatives to improve the sustainability of our business include turning off lights/equipment when not in use, installing smart monitoring in our heating system, using energy-efficient hardware, etc. We design our solutions to minimise excess data usage/storage, thereby reducing energy consumption, e.g. compression of images/video, commissioning hosting plans that scale up/down to minimise over-capacity, etc. We reduce paper usage by adopting digital tools/documents as standard. We recycle obsolete hardware/furniture with local charities.

Pricing

• Price: £10 to £27 a user a year
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@aurionlearning.com. Tell them what format you need. It will help if you say what assistive technology you use.