Evergreen Health Solutions Limited

Evergreen Life

Wellness app and provider of GP services, Evergreen Life lets people own their health information, driving informed healthcare and giving people the best chance of staying well. Collaborating with NHS England, NHS Digital and 3 major GP systems, Evergreen Life has facilitated mutually efficient interaction between practices and patients

Features

• Personal Health Record
• Patient Facing Services (Appointments, prescriptions, Consultations, conditions)
• Health and wellbeing advice and insights
• Social Prescribing, Online Consultations
• DNA Health Testing
• Questionnaires and Surveys
• Population Health Management and Research
• Health Record Sharing
• Digital Triage
• Digital workflow

Benefits

• access all patient health information in one place
• Make appointments, order Prescriptions, save clinician time
• Take control and improve your health and wellbeing
• Meet with your clinician or patient online
• unlock your DNA secrets to help stay fit & healthy
• Survey patients via demographics of your choice
• Use data for health research
• Share your record with those who care for you
• improve clinical and practice efficiency
• improve patient healthcare outcomes

£0 to £1 a user a year

• Free trial available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tom.dodd@evergreen-life.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

615344679928093

Contact

Thomas Dodd
0161 768 6063
tom.dodd@evergreen-life.co.uk

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: None
• System requirements:
  • IOS & Android compatible for mobile devices
  • Web portal accessible from a PC or Smart Device

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Urgent issues recieve a response within four hours, resolution witin a day. ; Routine requests recieve a response within one working day and resolution within five Working Days
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Web chat
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: WCAG 2.1 AA or EN 301 549
• Web chat accessibility testing: N/A
• Onsite support: Onsite support
• Support levels: During the subscription period, the Evergreen Support Team will offer technical support to all users.; ; Access to manned helpdesk and named Application Support Specialist is provided Mon-Fri (excluding Bank Holidays). Customers also obtain support froma named Account Manager for general support and escalation if required.; ; Standard support packages are included in published costs. Extended support hours and services may be agreed on a case by case basis with a customer, but may be subject to additional fees.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: A user simply creates a login on our website and downloads the app and logs onto it. Help documentation is available from our website https://help.evergreen-life.co.uk.
• Service documentation: Yes
• Documentation formats: HTML
• End-of-contract data extraction: We offer a personal health record which is free of charge for our users. They retain their data for as long as they have the app installed or have access to their account on our website. Users can request to have all data relating to them deleted at any time via our support team and inline with GDPR.
• End-of-contract process: The end of a contract would simply involve the withdrawal of our service or the removal of access to data.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • Linux or Unix
  • MacOS
  • Windows
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Our mobile and desktop services offer access to similar experiences over both platforms.
• Service interface: Yes
• User support accessibility: WCAG 2.1 AA or EN 301 549
• Description of service interface: API service interface
• Accessibility standards: WCAG 2.1 AA or EN 301 549
• Accessibility testing: User testing (including assistive technology) is supported via third party agencies and in-house UX design and PPIE expertise.
• API: No
• Customisation available: Yes
• Description of customisation: Service customisation is available to customers to account for local population and clinical needs, and selection of tools and their operation. Our Account Management Team support customers to select and apply customised options and pathways based on clinical expertise and usage data. ; Customisation extends to system behaviors, thresholds and clinical tools (form/questionnaires) which are configurable to the needs of each customer.

Scaling

• Independence of resources: Our solution is cloud based and scales both horizontally and vertically to meet demand. Additional resources are added based on automated monitoring of thresholds alongside the supervision of our infrastructure team.

Analytics

• Service usage metrics: Yes
• Metrics types: Evergreens tools facilitate access to comprehensive patinet and population level data to inform health and wellbeing choices. ; ; End users obtain sophisticated, yet accessible information based on their own PHR health records. ; ; In clinical settings we provide analysis of activity and efficiency over selected time scales analyse long term trends in patinet demand. ; ; We enable service providers and commissioners to monitor service and managment activity, including speed and method of response, clinial continuity and repeat user frequency.; ; Collectively, thse data for improvement support improved patient feedback, and outcomes for all users.
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Data export is provided via a secure supported service, due to the nature of data processed within our systems. This includes personal and special category data, managed within NHS secure networks.
• Data export formats:
  • CSV
  • ODF
  • Other
• Other data export formats:
  • XML
  • JSON
  • Format agreed with user
• Data import formats:
  • CSV
  • ODF
  • Other
• Other data import formats:
  • XML
  • JSON
  • Other formats agreed with user

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: Service levels vary between modules. Please see service specification documentation for details
• Approach to resilience: This information is deemed sensitive and is therefore available on request.
• Outage reporting: Evergreen Life have a customer (private cloud) dashboard and email alerting.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Limited access network (for example PSN)
  • Username or password
• Access restrictions in management interfaces and support channels: We have a cloud based active directory including two factor authentication for access to any internal or cloud system. Privileges are granted on a least-access basis and reviewed frequently in line with our plicies on systems access and management
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: You control when users can access audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: LRQA Limited
• ISO/IEC 27001 accreditation date: 07/02/2022
• What the ISO/IEC 27001 doesn’t cover: All services described fall into scope
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: Yes
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • CSA CCM version 3.0
  • ISO/IEC 27001
• Information security policies and processes: Evergreen Life work to ISO 27001, Cyber Essentials Plus, the Data Security and Protection Toolkit and the Information Governance Toolkit.; Full details of our policies, procedures and security governance are available on request.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Our configuration and Change management approach is fully documented in accordance with the requirements and standards of ISO27001. We are independently audited annually.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: Evergreen Life have a robust vulnerability management process. Patches are deployed as recommended by vendors in line with Cyber Security Checklists and in line with the ISO 27001 requirements. We subscribe to various alert models to ensure that we are identifying potential vulnerabilities at the earliest possible opportunity.
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: We respond immediately to our alerting channels, backed by enterprise grade security platforms which also alert and govern policies around patch deployment and the ability to guard against known vulnerabilities prior to a patch being deployed. Information on the systems in use is available upon request.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: Evergreen Life follow the ITIL process for incident management and the HSSI process. Users are able to report incidents via telephone, email and web chat. Incident reports are available either on request or delivered as part of a contractual requirement.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: Yes
• Connected networks:
  • NHS Network (N3)
  • Scottish Wide Area Network (SWAN)
  • Health and Social Care Network (HSCN)

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Evergreen Life is a B Corp Certified organisation.; https://www.bcorporation.net/en-us/find-a-b-corp/company/evergreen-life/; Evergreen Life is built on the foundation of empowering people to take control of their health and wellbeing by providing them with access to their personal medical records and personalised health and wellbeing information, so that they can make informed decisions. ; ; Evergreen Life are committed to reducing our carbon footprint and improving our environmental performance through all aspects of our Organisation. As part of Evergreen Life implementing ISO 14001, our Environmental policy sets out our commitment to:; • Continually improving the environmental impact of our business activities; • Improving the environmental benefits provided by our services (e.g. reducing unnecessary travel to appointments by monitoring patients remotely); • Preventing pollution; • Establishing measurable environmental objectives (e.g. reduced energy usage in our offices); • Achieving objectives to help minimise its environmental impact; To support our commitment to reducing our carbon footprint, Evergreen Life have implemented a number of environmental improvements:; • Electric vehicle charge points at our Head office; • Temperature in our building is regulated via heat pumps; • Employee cycle and electric vehicle schemes; • As a cloud first organisation, we operate remotely, reducing the need to travel, with deliberate promotion of public transport via our staff policies; • Use energy efficient appliances; • Recycle various waste streams; • Set environmental objectives as part of our ISO 14001 implementation; • Review our environmental performance in line with ISO 14001 and our B Corp certification.

  Covid-19 recovery

  As a cloud first organisation, Evergreen Life was able to manage its contingency plans in response COVID 19 effectively by becoming a fully remote company. Evergreen’s approach to social value and COVID 19 recovery includes the following: ; • Implementing new ways of working and delivering our services; • Recruiting staff from all areas of the UK and encouraging remote working; • Increasing collaborative working arrangements internally and with other organisations; • Developing our services to ensure they are accessible for everyone; • Improving workplace conditions to support COVID 19 recovery such as social distancing and remote working; • Ensuring that training and development is maintained ; In addition, our service provision has supported our customers to operate similar recovery plans, e.g. supporting clinical staff to maintain operational activity while maintaining social distancing and isolation protocols, via remote working and digital triage tools.

  Tackling economic inequality

  People are what matter to us most at Evergreen and we ensure that we tackle economic inequality by:; • Engaging with local staff, suppliers, patients and communities via our app, GPs and networking events; • Supporting local suppliers in the areas where we operate as well as ensuring that ethical considerations are accounted for e.g. environmentally friendly supplier; • Creating employment in local communities through locally delivered services across England; • Supporting local charities and charities that help tackle economic inequality, e.g. via donation matching employees’ charitable fund raising

  Equal opportunity

  Evergreen Life is committed to providing equal opportunities to all of its workforce and all job applicants by establishing and operating clear policies that set out the equal treatment of everyone regardless of race, age, gender, religion, sexual orientation, disability or any other protected characteristic. Evergreen Life reviews its recruitment procedures regularly to ensure all individuals are treated fairly and on the basis of their merits and abilities. ; At Evergreen Life, we ensure all employees are provided with equal access to training, development and promotion opportunities and that those responsible for making such decisions are trained to do so by ensuring opportunities are given based on merit and skill and not favouritism. ; To ensure that our employees are treated fairly in all aspects of employment, Evergreen Life ensures that it pays its workers fairly regardless of gender, race, age or any other protected characteristic, and that it offers policies that support work – life balance such as family leave policies and remote and hybrid working policies. Evergreen Life is a registered supporter of the Greater Manchester Good Employment Charter (gmgoodemploymentcharter.co.uk).; Evergreen Life’s core values are centred around people, inclusion and diversity, which is why it has implemented a People Plan team and Communication Ambassadors so that all employees have their voice heard. Our Company provides training sessions to raise awareness of diversity and inclusion and continually strives to provide a supportive and inclusive work environment.

  Wellbeing

  As an Organisation that lives and breathes health and wellbeing, Evergreen Life is passionate about improving the health and wellbeing of both its staff and those who use our services. ; Evergreen Life’s main aims to support wellbeing include:; • Promoting mental and physical health and wellbeing amongst its staff, service users and community through our health and wellbeing content ; • Providing a positive environment for our employees to work in ; • Providing equipment and opportunities that promote good physical and mental health; ; With people at the forefront of our business, Evergreen’s employees are key to the success of the business. Looking after our employees is top priority and we do this by:; • Ensuring that our staff are cared for and supported in all aspects such as mental and physical health and wellbeing, financial wellbeing and legal support through our enhanced benefits; • Providing healthy fruit and snacks within the office and a hybrid workforce; • Sharing our health and wellbeing content with employees which provides helpful tips and insights into how they can improve their own health and wellbeing; • Implementing a People Plan to ensure that all employees’ voices are heard; • Providing enhanced benefits that include access to GPs, nutritionists, family and legal help, along with offers and discounts on things such as gym memberships; • Implementing employee engagement sessions and Communication Ambassadors

Pricing

• Price: £0 to £1 a user a year
• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: Full access to the Evergreen Life PHR app and controlled access to pseudonymised data repository. Demonstration of other services are available free of charge
• Link to free trial: https://www.evergreen-life.co.uk/download

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tom.dodd@evergreen-life.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.