Alpha MD

Liberate Pro

Digital patient education platform with clinically validated content for specific diseases and conditions to maximise the time between clinician and patient. Widens access for patients with low health literacy to improve treatment adherence by improving patients’ understanding, decision-making and consent to treatment. Secure and accessible for both patients and clinicians.

Features

• Online secure patient education platform with disease-specific content
• Functionality to annotate content with specific instructions
• Written, audio, animation and pictorial content with web-link signposting
• Ability to record entire consultation and share with patient
• Content developed using validated information based upon NICE guidelines
• Used for public health campaigns to send pre-populated information packs
• DTAC and ORCHA complaint
• Web-based to reduce barriers for patients
• Single sign-on through integration with SystemOne and EMIS
• Robust usability testing undertaken with end-users

Benefits

• Addresses low literacy – information in pictorial and plain English
• Improves patient experience, comprehensions and adherence to advice
• Improves patient’s retention and understanding of their care plan
• Saves clinicians’ time through improved efficiency and productivity
• Pictorial information supports patients with low health literacy
• Trials show improves patient efficacy and understanding
• Validated information based upon NICE guidelines
• Improves medication and care plan adherence
• Content available in other languages
• Addresses diagnostic amnesia for patient receiving distressing news

£10,000 to £50,000 a unit

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at douglas.barrett@alphamd.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

529791890228015

Contact

Douglas Barrett
07795491107
douglas.barrett@alphamd.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: No constraints.
• System requirements:
  • You need a browser
  • No other system requirements

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Our service agreement is to answer any email within one business day.
• User can manage status and priority of support tickets: No
• Phone support: No
• Web chat support: No
• Onsite support: No
• Support levels: For patients and clinicians using Liberate Pro we aim to reply to them within 1 business day of sending an e mail.; ; For purchasers of Liberate Pro we will also look to reply to them within 1; business day. We are also happy to call them to resolve any issues.; ; Our support is free of charge.; ; We provide a dedicated technical support and b2b manager for all issues who is a single point of contact
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We provide both onsite and on line training. We also provide user documentation. We also have a training model and a user manual.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
  • Other
• Other documentation formats:
  • Video
  • Power point
• End-of-contract data extraction: A report will be created for the user on demand by raising a support ticket.
• End-of-contract process: The users will be able to access all their data by raising a support ticket. There is no cost for this. The account will then be deactivated.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: There are minimal differences. The screen is obviously smaller. Some log in buttons are in a different place.
• Service interface: No
• User support accessibility: None or don’t know
• API: No
• Customisation available: No

Scaling

• Independence of resources: Our system is robust and can handle any number of clients. We have tested this in the past.

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: No
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: They can download their data as an excel spreadsheet
• Data export formats: Other
• Other data export formats: Download as an excel speadsheet
• Data import formats: Other
• Other data import formats: Data is uploaded by Liberate Pro

Data-in-transit protection

• Data protection between buyer and supplier networks: Legacy SSL and TLS (under version 1.2)
• Data protection within supplier network: Other
• Other protection within supplier network: We have a VPC - virtual private cloud

Availability and resilience

• Guaranteed availability: We use AWS managed services to host our application. Uptime is guaranteed by AWS. We are happy to refund on a case by case basis.
• Approach to resilience: We use AWS managed services who build in resilience across multiple availability zones. AWS have multi data centres which allows them to distribute load and ensure a continuous service. We are confident in their services and have had no issues using AWS up to now.
• Outage reporting: We have a dashboard which is supplied by AWS. We also receive emails from AWS which allows us to monitor our services. If we have an outage we would issue an e mail alert.

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: We have role based access controls. Permissions and roles are granted to the user govern their level of access.
• Access restriction testing frequency: At least every 6 months
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: Between 1 month and 6 months

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications: We are DTAC certified

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: Pen testing and cyber essentials.
• Information security policies and processes: We have in-house data security and privacy policy in place to ensure the confidentiality, integrity and availability of data and resources. This Policy is primarily derived from the national standards However, where applicable, Alpha MD seeks to exceed these standards to ensure compliance with stringent local and International laws. ; ; All employees are made aware of the data security policy at the time of joining. It is verified through regular audits or inspections to ensure no breach has happened and the policies are followed. ; ; We have implemented physical, administrative and technical security measures which are designed to prevent data loss, unauthorized access to personal data and misuse, disclosure, alteration, damage or destruction of personal data.; ; We train our employees on the privacy policy as well as information security procedures regarding the appropriate access, use, and disclosure of personal data. We also conduct periodic risk assessments on our processes and information systems.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We follow agile methodology for change management. We follow 4-week sprints. In each sprint we gather requirements, Plan, design and test. Releases are done as and when required. Releases are done via a CI/CD pipeline.; ; Configuration management is done with the help of AWS EC2 Amazon Machine Images (AMI). Audits are run before every release to scan for vulnerability. Regular PEN testing is also done to manage risk.; Components tracked are OS, VPCs, libraries used in the service, databases, networks and security groups.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: We run PEN testing and cyber essentials testing. We can deploy patches within seven days. Our service provider is constantly managing for threats and will alert us if any threat is found.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We are alerted by PEN testing. We do a system check every day for business continuity. When we find a potential compromise we look to fix it as quickly as possible and usually within one business day.
• Incident management type: Supplier-defined controls
• Incident management approach: We will get an alert from AWS when there is a system failure. Users can contact us by email if they need to report an incident. If there is an incident we will inform users by email.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  Tackling economic inequality

  Tackling economic inequality

  Liberate Pro is aligned to the NHS Core 20+5 values helping to tackle inequalities and helping with the five most pressing needs in the NHS.; ; We also help the NHS achieve net zero. Our product is digital and does not require paper saving on letter and postage. In addition we cut down NHS appointment meaning there are less journeys made to hospitals and surgeries.

Pricing

• Price: £10,000 to £50,000 a unit
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: We will give access to our system and it's educational material for a limited time period based on the customer.

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at douglas.barrett@alphamd.com. Tell them what format you need. It will help if you say what assistive technology you use.