HEALTH DIAGNOSTICS LIMITED

Health Options CS: Targeted Invites Module

Targeted Invites enables the health check call & recall process: users can identify, target, and invite people for consultations. Establish your eligible cohort by (1) using our specialist clinical system queries; or (2) uploading your own data. Cohorts can be stratified using integrated predictive risk tools, with invites sent automatically.

Features

  • Enable specialist clinical system cohort queries to run remotely
  • Stratify cohorts using inbuilt advanced predictive risk tools
  • Target cohorts by ethnicity, deprivation, clinical data, and risk
  • Send locally configured SMS and/or postal invites automatically
  • Track and get reports on all invites sent
  • Operate at individual site level, centrally, or both
  • Use as a stand-alone product without remote queries
  • Distribute invites for a range of public health programmes
  • Tailor invite content to project needs and local languages
  • View comprehensive analytics in Power BI

Benefits

  • Comprehensively facilitates the health check call & recall process
  • Reduces primary care admin by enabling queries to run remotely
  • Allows users to prioritise and target populations in greatest need
  • Maximises efficiency by enabling invites to be sent automatically
  • Ensures effective call & recall management through reliable invite tracking
  • Flexible enough to be operated at site level or centrally
  • Used in NHS primary care, occupational health, and private sectors
  • Future-proofs budgets by enabling deployment on different programmes
  • Maximises impact with locally tailored invite content
  • Enables detailed monitoring of programmes using intelligent data analytics

Pricing

£220.00 a licence

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at julie.evason@healthdiagnostics.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

4 9 0 6 3 0 0 5 3 4 4 2 6 9 6

Contact

HEALTH DIAGNOSTICS LIMITED Julie Evason
Telephone: 01244 669700
Email: julie.evason@healthdiagnostics.co.uk

Service scope

Software add-on or extension
No
Cloud deployment model
  • Public cloud
  • Hybrid cloud
Service constraints
The system is conditional on user accounts being registered with Microsoft as part of the single sign-on philosophy. Typically email accounts hosted by Microsoft hosted Exchange services are already registered Microsoft accounts (e.g. NHS Mail accounts).
System requirements
Internet browser

User support

Email or online ticketing support
Email or online ticketing
Support response times
Mon-Fri, 8.45am - 5.00pm: response within 2 hours
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
WCAG 2.1 AA or EN 301 549
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
No
Onsite support
No
Support levels
Health Diagnostics offer a single and full level of support to the following service levels.
Health Diagnostics will respond to service-related incidents and notify the Patient/Service User of the level of classification. A helpdesk ticket number will be submitted to the Client with the service level classification as follows:
• 0 - 8 consecutive working hours for issues classified as High priority.
• Within 32 consecutive working hours for issues classified as Medium priority.
• Within 96 consecutive working hours for issues classified as Low priority.
Remote assistance will be provided in-line with the above timescales dependent on the priority of the support request and if allowed by the Practice/Provider system. There is no difference in cost between the support levels Health Diagnostics provide. If part of the contract, as is standard on larger projects (e.g. NHS Health Check projects) dedicated account managers are assigned.
Support available to third parties
Yes

Onboarding and offboarding

Getting started
We conduct initial discovery meetings with commissioners in order to ensure that the solution they procure and its configuration meets their needs. The resulting solutions are trialled with a determined beta site before deployment across a project area.
From the perspective of on-boarding individual users, we provide remote training sessions from 1 to 10 people. These sessions are conducted via Teams and are tailored to the projects purchases.
All trainees have access to an extensive online training library with videos, pdf documents and quick guides covering all the topics.
Onsite training can be arranged for groups of up to 20 people.
Full support is offered via telephone following the training.
All documents are updated regularly.
Service documentation
Yes
Documentation formats
  • PDF
  • Other
Other documentation formats
  • MP4
  • Email
  • User forms
End-of-contract data extraction
Service history and data can be extracted during and after contract end dates. The extractions are available in a 'flat' CSV format, or available as a SQL server backup on request. Full support provided if required.
End-of-contract process
The contract end is usually one month after the end of the contract period to allow for completion of the final months/contract period report.

Following the provision of the final reporting, Health Diagnostics can provide a copy of the project's data and complete a deletion of all data and provide a Certificate of Destruction.

Using the service

Web browser interface
Yes
Supported browsers
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
Application to install
No
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
The module is primarily designed to work on a desktop. Given that the majority of users are administrators in healthcare and clinical settings, desktop devices are the most widely used. The module will work on a minimum of a tablet viewport of 1024 x 768.
Service interface
Yes
User support accessibility
WCAG 2.1 A
Description of service interface
Targeted Invites’ (TI) web-based interface is contained within one intuitive and easily navigable page. Access is granted via Microsoft Single Sign-on (which supports NHS Mail). Once logged in, users select the type of invite being sent (e.g. SMS/postal etc.). Filters can be applied to enable users to target certain groups (e.g. those at risk of CVD). Sortable lists of people for invite are generated and displayed within tables. Users then send automated invites with the click of a button. TI can be operated centrally by selecting the practice being sent on behalf of. A range of admin features are accessible.
Accessibility standards
WCAG 2.1 A
Accessibility testing
TI has been subject to extensive testing. This includes testing with assistive technologies. Having been assessed for clinical risk, TI is DCB0129 approved. This ensures that the development and testing procedures deployed are robust, systematic, and risk-averse. The testing framework utilised to achieve this standard incorporates the following components relating to accessibility and resilience in terms of diverse usage:
• Running focus groups with users to establish their usage habits, log improvements and present iterative enhancements.
• Employing ‘easy-read’ letter templates developed and deployed in collaboration with the Welsh Health Board.
• Using the NHS Service Design Manual to guide the research & development process, thereby embedding industry standards from the beginning of the development life-cycle.
• Confirming the effective compatibility of assistive technologies such as screen readers, keyboard navigation, and screen tinting.
• Ensuring that potential users with impaired vision can enlarge the screen to an acceptable degree and navigate it in an operative manner.
• Providing training materials with synchronised captions, audio-descriptions, and which are structured in a manner to ensure digestibility. Feedback on accessibility and experience of training is captured as a matter of course.
API
No
Customisation available
Yes
Description of customisation
The following elements can be customised in Targeted Invites (TI). Unless indicated, customisation is predominantly carried out with the commissioner of the service during the solution configuration phase of deployment:
• Letters and SMSs can be customised according to local content (and can include accessible ‘easy-read’ content).
• Work-flows can be created to enable invites to be sent at the locally-determined frequencies.
• Enable locally determined pre-set filters for targeting groups that represent local public health priorities
• Configuration can be completed to allow invites to be sent from a central location on behalf of participating practices. Central administrators can then, on an on-going basis, select the sites they wish to distribute on behalf of.
• Users can be enabled and disabled by site administrators (actionable on-going).

Scaling

Independence of resources
The service is hosted on Azure Web Application servers which automatically scale if service demand dictates. Auto scaled events are monitored by Health Diagnostics systems support to enable optimisations if necessary.

Analytics

Service usage metrics
Yes
Metrics types
As part of the service, service administrators can access Power BI based dashboards to inform on service performance. This includes comprehensive data visualisations depicting data collected in relation to various key components of the health check pathway. Basic service performance PDF's are also available at an agreed frequency and/or on request.
Reporting types
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Other security clearance
Government security clearance
Up to Baseline Personnel Security Standard (BPSS)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
United Kingdom
User control over data storage and processing locations
No
Datacentre security standards
Supplier-defined controls
Penetration testing frequency
At least every 6 months
Penetration testing approach
‘IT Health Check’ performed by a CHECK service provider
Protecting data at rest
  • Physical access control, complying with another standard
  • Encryption of all physical media
Data sanitisation process
Yes
Data sanitisation type
Deleted data can’t be directly accessed
Equipment disposal approach
Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data export approach
Several export options are provided through the product/service, from CSV to PDF based formats. A comprehensive extraction of data would be carried out by the user via the solution's Control Centre.
Data export formats
CSV
Data import formats
CSV

Data-in-transit protection

Data protection between buyer and supplier networks
TLS (version 1.2 or above)
Data protection within supplier network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

Guaranteed availability
Front end application servers are hosted on Azure Application servers with a guaranteed uptime SLA of 99.9%. The service auto scales on demand, if service usage dictates. Database servers are operated in a mirrored availability group to ensure 100% failover if any of the database servers become unavailable.
Approach to resilience
Front end application servers are hosted on Azure Application servers, which are protected by the defence layers provided by Azure, guaranteed by their SLA. Our backend systems are protected by different layers of defence, both physical and virtual to ensure the system is resilient and stays available for the users.
Outage reporting
The service front end sits behind an Azure application service gateway which provides the ability to provide custom error reporting if there is a service outage. Similarly there is a Power BI dashboard that monitors service health for registered users.
Registered users are informed in advance by email if there are scheduled maintenance tasks that could affect service, as well as advance notice alerts built into the application front ends

Identity and authentication

User authentication needed
Yes
User authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
Access restrictions in management interfaces and support channels
The service uses Role Based Access Control.

A customer nominates a responsible officer [RO] who is responsible for inviting service users and associating their relative access levels.

The highest level of service access is only held by Health Diagnostics system personnel.
Access restriction testing frequency
At least every 6 months
Management access authentication
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

Access to user activity audit information
Users contact the support team to get audit information
How long user audit data is stored for
At least 12 months
Access to supplier activity audit information
Users contact the support team to get audit information
How long supplier audit data is stored for
At least 12 months
How long system logs are stored for
Between 6 months and 12 months

Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
CQS (Certified Quality Systems) Ltd
ISO/IEC 27001 accreditation date
05/10/2021
What the ISO/IEC 27001 doesn’t cover
Clinical risk management is not covered under ISO/IEC 27001. However the application has been assessed by our Clinical Safety Officer under the directives of the NHS DCB0129 - Clinical Risk Management: its Application in the Manufacture of Health IT Systems.
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Cyber essentials
Yes
Cyber essentials plus
No
Other security certifications
Yes
Any other security certifications
NHS Data Security and Protection Toolkit

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
ISO/IEC 27001
Information security policies and processes
Health Diagnostics operate an Information Security Management System [ISMS] that conforms to and is externally audited against ISO27001:2013 annually. Senior management commit to and support the ISMS to ensure uniform security implementation across the organisation.

It is the policy of Health Diagnostics to ensure compliance, in accordance with all the legislative obligations including but not limited to: Data Protection Act 2018; and the UK General Data Protection Regulation [UKGDPR]. Health Diagnostics also requires all employees, contractors and third parties to comply with this policy and supporting standards and procedures where appropriate.

Health Diagnostics annually complete the NHS DSP Toolkit.

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
Requests, issues or changes done to the software are tracked as individual items in our development pipeline.
The whole life of the items can be checked at any time in the development tool and they are reviewed and assessed by both the responsible people in the team and a clinical safety officer for security impact.
The items are reviewed and tested at different stages of the development, pre-release and release.
Vulnerability management type
Supplier-defined controls
Vulnerability management approach
Health Diagnostics systems and services are dynamically checked for vulnerabilities using proprietary scanning and penetration testing utilities. These utilities are dynamically updated to include known vulnerabilities and also deploy heuristic scanning methods. Deep scans are scheduled at regular predetermined times to ensure no vulnerabilities exist. If vulnerabilities are found then a report highlighting the vulnerability and categorising as high, medium or low risk is delivered to the head of IT for relative prioritisation and action.
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
The network administrator has implemented a network management and monitoring system, which will allow Health Diagnostics Ltd the ability to manage the network and its hardware remotely and monitoring performance, connectivity and integrity. This system is capable of maintaining a log of activities and those to be logged are detailed in a Company Security Standard for Access & Authentication.

Networks are protected by an appropriately placed and managed firewall.
Incident management type
Supplier-defined controls
Incident management approach
Incident management is covered by the Company ISMS is a security standard which details the processes for reporting incidents and how incident reports are provided to various official bodies if necessary.
All incidents whether identified by Company staff or customers will be reported to the IT help desk and treated in accordance with customer SLA's.
For example data security or clinical safety incidents will be classified the highest priority.
Depending on the severity of the incident, incident reports will be made available to the customer and/or relevant legislative body.

Secure development

Approach to secure software development best practice
Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

Connection to public sector networks
No

Social Value

Fighting climate change

Fighting climate change

Health Diagnostics place a significant emphasis on promoting environmentally sustainable practices and recognise the intimate links between population health and a healthy natural environment. Specific ways in which Health Diagnostics support this include:
- Developing technologies that allow for seamless and electronic data transfer and interoperability, thereby helping the NHS to achieve its aim of going paperless.
- Reducing the use of single-use-plastics by eliminating the avoidable use of SUP’s in the company, working with suppliers, contractors and subcontractors to improve their environmental performance, providing staff training, and supplying mechanisms for increasing recycling and sustainability monitoring.
- A cycle to work scheme is available, encouraged and well used by employees.
- Travelling by car is reduced by enabling remote working, encouraging webinar meetings, and delivering online training tutorials instead of face to face.
- Meters are installed to allow for close tracking and monitoring of office electricity usage. Lights, air-con and computers are switched off when not in use.
- Sustainable LED lighting is utilised in the office environment: Luminex 400978 40w panels, configured to a computer-generated lighting plan. This was the most efficient on the market when installed. All office communal and outside lighting is also LED.
- Toshiba office air conditioning units that were also the most efficient on the market when purchased are installed.
- All partitioning utilised in the office environment is demountable and reusable.
- Comprehensive office recycling facilities are available and actively used/encouraged.
- Recycled and reconditioned printers, cartridges and recycled paper for preparing documents are all utilised extensively.
Covid-19 recovery

Covid-19 recovery

Supporting the Covid-19 recovery is a key priority of Health Diagnostics. There are various ways in which we are pursuing this, some of which relates to how we support our customers, whilst others relate to how the organisation functions to support internal staff.
Supporting customers:
- We have developed technology that enables the delivery of digital self-assessed health checks. This allowed for health check programmes to continue, with consultations conducted remotely despite social distancing requirements that were in place during the lockdowns. The technology also maximises the emerging appetite amongst the population - largely driven by the pandemic - to engage with their health digitally.
- Supporting NHS trusts to deliver occupational health checks to NHS staff, including throughout the pandemic. This has resulted in a significant number of important outcomes, including reductions in obesity, blood pressure, and relative risk of CVD. Such health metrics, if not managed, can all raise the risk of suffering adversely from Covid-19. Health Diagnostics were recipients of the award for the Best Wellbeing Initiative at the 2021 Occupational Health and Wellbeing Awards for this work.
- Outcomes from other NHS projects have proven that health check projects that Health Diagnostics support can result in reduced staff sickness absence (by 10%), thereby helping to create a more resilient and robust NHS workforce.
Supporting internal colleagues:
- We have provided and continue to provide extensive support to all staff members to enable them to negotiate the challenging circumstances surrounding the pandemic. This has included flexible working arrangements, including enabling international working.
- Health and wellbeing support, including on-going health tracking, is freely available to all staff to enable them to feel empowered with the knowledge they need to ensure ongoing resilience from a personal health perspective.
Tackling economic inequality

Tackling economic inequality

Tackling economic inequality is a key output that has been achieved through the public health work that Health Diagnostics supports the delivery of. One of the most visible ways this has been demonstrated is through research conducted by Imperial College London’s Dept. of Primary Care and Public Health that found that community health check providers which use Health Diagnostics’ systems and services to deliver public health programmes “effectively reach under-served groups by delivering preventive CVD services to younger, more deprived populations, and a representative proportion of ethnic minority groups. If the programme is successful in motivating the under-served groups to improve lifestyle, it may reduce health inequalities therein” (Woringer et al, 2017). Given the damaging role that health inequalities play in contemporary society and how they are contributing to widening the gap between rich and poor, making effective efforts to close that gap represents a key way in which the health of current and future generations can be future-proofed. As Imperial College’s research shows, Health Diagnostics have been and remain at the cutting-edge of supporting such efforts.
Equal opportunity

Equal opportunity

Supporting equal opportunities by reducing the disability employment gap and tackling workforce inequality are important values that Health Diagnostics pursue. Key ways in which we do so, from a pragmatic standpoint, include:
- Ensuring all our staff are paid above the living wage; all Health Diagnostics’ employees earn over £10 per hour.
- Health Diagnostics have always paid above the minimum and living wage levels and are committed to ensuring contractors do so to.
- Staff that are simultaneously carers are afforded extra flexibility in their role and working hours.
- The option for remote/home working has been made available to staff, post pandemic, on an on-going basis to facilitate the support it offers in different personal circumstances.
- Building accessible systems that, by design, cater for people from divergent backgrounds or who have protected characteristics.
- Ensuring that health check providers are able to access information that enables them to effectively support the needs of sexual minority populations when delivering health checks (e.g. how to support trans individuals to understand their cardiovascular risk when the NICE recommended and OHID-sanctioned risk algorithm, QRisk, only accounts for a binary gender distinction).
Wellbeing

Wellbeing

Supporting wellbeing is at the core of what Health Diagnostics do as an organisation. There are numerous ways in which we achieve this for our customers and for our staff. These include:
Supporting customers:
- Health Diagnostics has supported numerous NHS trusts to deliver health checks to their staff. One such programme at East Sussex Healthcare NHS Foundation Trust – which delivered 1069 checks to trust employees, was widely praised by NHS senior leaders, and was featured by NHS Employers for its innovative approach – saw 64% of the individuals that were referred following their health check making a lifestyle change within one month.
- The importance of collecting accurate health data is vital if the resulting actions are to be appropriately targeted. Researchers working on the NHS Health Check National Evaluation praised Health Diagnostics’ solution for its inherent ability to ensure complete datasets are collected by providers. According to researchers from Imperial College London, data gathered with Health Diagnostics’ “patient-centred” solution “had much better clinical and demographic recording of data [than that gathered using clinical system templates] because it was designed to collect data specifically for the health check.”
- Numerous outcomes, accessible online, attest to Health Diagnostics’ support for health and wellbeing: https://healthdiagnostics.co.uk/proven-results/.
Supporting internal staff:
- Health & Wellbeing courses are offered to all staff and encouraged. The courses include; Toolkits for Mental Health & Wellbeing, Healthy Working Relationships and Creating a Positive Workplace Wellbeing Culture. All of these are provided by Cheshire West and Chester Council, Public Health Team.
- Health Diagnostics offers free health checks/lifestyle advice to all employees, including for mental health, and experiences very low sickness absence rates.
- Health Diagnostics has been supporting the cycle to work scheme for the past 8 years, which 40% of employees have taken advantage of.

Pricing

Price
£220.00 a licence
Discount for educational organisations
No
Free trial available
No

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at julie.evason@healthdiagnostics.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.