KiActiv

KiActiv®

KiActiv® is a digital service which empowers patients with long-term conditions and those on rehabilitation pathways to self-care at home using their personalised everyday physical activity data. Our mentor-guided digital service empowers people to make sustainable behaviour change in the context of their health, capacity and environment.

Features

• Integrates accurate physical activity data using wearable technology
• Analysis of everyday physical activity across multiple dimensions
• Personalised online self-care dashboard, accessible 24/7
• Remote 1-to-1 guided support from a dedicated mentor
• Proven visualisations co-designed with patients and clinicians
• Interactive behaviour change tools
• Easy-to-use iOS and Android app for data upload
• Users can tag daily activities and report how they feel
• Real-time analytics for patient, pathway or organisation

Benefits

• Provides a personal understanding of everyday physical activity dose
• Expands the benefits of physical activity beyond just structured exercise
• Develops the knowledge, skills and confidence, empowering sustainable behaviour change
• Supports people to get the most from the digital technology
• Enables self-care at home for improved outcomes and experience
• Supports multiple healthcare pathways and waiting list management
• Increases access and provides continuity of care (e.g., during Covid-19)
• Reduces travel and emissions associated with face-to-face services
• Reduces burden on face-to-face services
• Provides comprehensive measurement of impact

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tparker@kiactiv.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

563274788662457

Contact

Tommy Parker
07739512087
tparker@kiactiv.com

About your service

• Service categories:

  Applications

  Production and operations

  • Other operations

  Service industry and public sector operations

  • Healthcare
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: None
• System requirements:
  • Web-connected device (i.e., PC, laptop, tablet)
  • Up-to-date web browser (for accessing personal online dashboard)
  • Compatible iOS/Android device (for data sync app)

User support

• Email or online ticketing support: Yes
• Support response times: Generally within 24 hours, or the next working day at weekends
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: No
• Support levels: We provide the following support at no extra charge:; - Telephone support from 9am to 6pm Monday-Friday (excluding bank holidays) (immediate response).; - Email support (accessible 24/7, response to be expected within a maximum of 1-working day).; - Online support via our website in the form of specific support videos (accessible 24/7).; - Online support via our website by filling out our support form (accessible 24/7, response to be expected within a maximum of 1-working day).; - Online support via our website in the form of FAQs (accessible 24/7).
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Users are guided through the setup process by a trained KiActiv® Mentor, to help them become accustomed with both their physical activity data and the tools within their personalised online dashboard that incorporate clinically proven behaviour change techniques. This training is provided in the form of a remote telephone call.; ; Users receive a minimum of 6x20 minute 1-2-1 telephone calls with a trained KiActiv® Mentor over the initial 12-week KiActiv® programme. This provides them with sufficient knowledge and understanding of physical activity, and valuable context behind the data to enable them to make meaningful changes to their lifestyle, and continue their self-care journey long beyond their initial KiActiv® programme.; ; Further support is also available via online instructional videos, and our online user documentation (i.e. how-to-guides and FAQs etc.)
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Users retain ongoing access to the technology, their physical activity data and their personal online dashboard, enabling them to continue their self-management. Users can also request a CSV export file via email.
• End-of-contract process: All users of the service will retain access at the end of the contract. In the event of a user deciding that they wish for their account to be deleted, they can request this via email.
• Documentation accessibility standard: EN 301 549

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: KiActiv® is a responsive web app and works on any device with a compatible web browser.
• Service interface: No
• User support accessibility: EN 301 549
• API: No
• Customisation available: Yes
• Description of customisation: KiActiv® is a flexible service that integrates with multiple healthcare pathways. Customisations for the following are available and will be discussed during the mobilisation phase with clinicians and commissioners:; - Additional questionnaires and data sets; - Tailored onboarding materials; - Data reporting and summary analytics

Scaling

• Independence of resources: The service is hosted on Amazon Web Services cloud infrastructure, which enables our application to be scaled easily. We have undertaken significant capacity planning based on usage data in order to size our current infrastructure to handle traffic and adapt to increased demand.

Analytics

• Service usage metrics: Yes
• Metrics types: - Engagement Data (e.g. device syncs and platform visits); - Physical activity over time; - Patient reported outcome measures (PROMs)
• Reporting types:
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Other
• Other data at rest protection approach: Amazon Web Services is physically and digitally protecting our data complying with the highest standards. The primary data store is on a private network unreachable from the internet.
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data importing and exporting

• Data export approach: Users can request a data export via email.
• Data export formats: CSV
• Data import formats: Other
• Other data import formats: JSON

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: KiActiv® is available 24/7 with the exception of planned maintenance.; We will use best endeavours to achieve an availability of >99.9% during each month.; This availability is dependent on the service levels and corresponding uptime commitments guaranteed by our hosting service provider, AWS.
• Approach to resilience: Available on request.
• Outage reporting: Communicated to registered users via email.

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: Access to management interfaces is handled through role-based authentication. These roles are defined in the database and access is controlled by set permissions.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: Cyber Essentials; NHS Data Security and Protection Toolkit
• Information security policies and processes: We have an Information Security Management System (ISMS) which describes and demonstrates our approach to information security management. This includes our commitment to:; - Managing and mitigating risks; - Legislative compliance; - Assigning appropriate resources to the implementation and maintenance of the ISMS; ; The ISMS is regularly reviewed by management and aligns to ISO:27001 best practice and the NHS DSP Toolkit.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Software changes are tracked and audited through industry standard tools and processes, with automated testing, staging deployment, and the ability to rollback changes if necessary. Changes that affect components involved with service security are subject to additional review and testing.; ; Infrastructure is managed in part by our cloud provider. Components have updates from suppliers applied automatically, and replacements are scheduled prior to supplier's end-of-life dates.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Our core application is subject to automated dependency vulnerability checking and these are reviewed, prioritised and addressed as part of our development process. Information for these checks is drawn from the GitHub Advisory Database. Infrastructure security vulnerabilities are managed in part by our cloud provider. Operating system patches are automatically applied within 24 hours of release by the supplier.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Our platform is monitored through a combination of health checks, exception reporting, alerting and other operational processes. Potential incidents are escalated in accordance with our Information Security Incident Management Policy for further investigation.
• Incident management type: Supplier-defined controls
• Incident management approach: We have internal policy documents that define how incidents should be reported, tracked and escalated if necessary. All staff have been trained to follow the processes detailed in this policy.; ; Records of the incident shall be maintained, including details of the person reporting it, the analysis of the incident, details of the actions implemented, and how the resolved incident was reviewed for effectiveness and formally closed. All affected parties will be informed about the incident and any impacts, as well as proposed resolutions.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: Eed827c4-07e9-4f45-9f02-767b9297690f
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: Yes
• Any other security certifications:
  • NHS Data Security and Protection Toolkit
  • NHS DTAC

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tparker@kiactiv.com. Tell them what format you need. It will help if you say what assistive technology you use.