ORGVUE LIMITED

Orgvue: HR Analytics, Organisation Design, Strategic Workforce Planning, Transformation & Mergers

The leading solution for OD, organisation transformation, intentional workforce planning, flexible organisations and mergers. Consolidate, clean, visualise workforce data then revolutionise how you see, design / model, plan and monitor organisation and Establishment change. AI accelerators for natural language analysis and job to role mapping. Operationalise external labour market data.

Features

• Data integration and cleansing: Merge multiple sources for modelling, planning.
• HR analytics: See organisation new way, new insights, better improvements.
• Organisation design: Model and compare scenarios for your future organisation.
• Transformation management end to end, including implementation & benefits tracking
• Workforce planning: close supply / demand gap and track actuals.
• Competency: understand skills you have and needs for future roles
• Merger management: Merge organisations faster and achieve better outcomes.
• Ongoing organisation effectiveness & health monitoring and continuous change.
• Surveys: crowd source skills & activity data, new insights, planning
• Collaboration: teams work & plan on same data simultaneously, securely.

Benefits

• Transform strategic HR: centre of excellence, more value to business.
• Consolidate and clean organisation data, enhance data in source systems.
• Accelerate, reduce cost in workforce planning & OD through workflows.
• Retain staff: plan upskill for AI & future work requirements.
• Organisational Planning and Analysis: best practice strategic workforce management, OD&D.
• Talent & succession planning: to optimise skills, retention and recruitment.
• Set org targets & guardrails, track progress through the organisation.
• Implement, operationalise and track your strategic workforce plan.
• Job architecture: AI to accelerate mapping positions to roles
• Fewer episodic major projects & disruption through intentional continuous evolution.

Service documents

• Pricing document

  ODT

• Service definition document

  ODT

• Terms and conditions

  ODT

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at mike.smith@orgvue.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

618938407288950

Contact

Mike Smith
+447887673963
mike.smith@orgvue.com

About your service

• Service categories:

  Applications

  Enterprise resource management

  • Enterprise performance management

  Human capital management

  • Talent Management Applications
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: None
• System requirements:
  • Windows or Mac computer with latest operating system
  • 8GB RAM (16GB or above recommended)
  • Google Chrome or Microsoft Edge Browser - latest stable release
  • Internet download speed of 10Mbps+ with ping interval <100ms
  • MSPowerPoint or Google Slides for Tree visualization export & edit
  • MSPowerPoint or Google Slides for other slide type image export
  • Operates on lower specification, larger dataset performance may be limited

User support

• Email or online ticketing support: Yes
• Support response times: Orgvue support desk is staffed Monday-Friday from 0900-1700 (excluding Bank Holidays)
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Technical help desk, online resources & videos, customer success manager and Orgvue community events all provided with Orgvue subscription at no additional cost.; ; Specialist advisory services and technical account management services available at additional cost, scoped to suit individual customer needs.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Orgvue can be used from day 1 of your Orgvue tenant being available.; The Orgvue team will:; - Set up automated as-is data refresh, user permissions and in-scope Orgvue functionality; - Define, configure and train in customer specific use cases; - Provide trainer led training for specific functionality / use cases; - Provide platform administration training so you are self sufficient in managing your Orgvue tenant; - Online documentation, FAQs, videos and help resources; - Ongoing support through technical help desk and customer success manager
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Easy to extract data from Orgvue to CSV, PPT and PDF, subject to user permissions, to extract all data and visuals required.
• End-of-contract process: No additional cost at end of contract, assuming you remove all the data that you require. You will be trained how to do this at the outset and our technical help desk can advise.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Chrome
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: WCAG 2.2 AA
• API: Yes
• What users can and can't do using the API: Customers can push data into and pull data with various filters from Orgvue using Orgvue's APIs
• API documentation: Yes
• API documentation formats: PDF
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Orgvue is front end user interface operated and managed.; Customers can create their own analysis, reports and workflows to suit many custom use cases.; This is front end configuration, not coding / back end customisation.

Scaling

• Independence of resources: Orgvue works primarily on the user's browser utilising the resources of their local PC. Orgvue opens data sets and saves them back to the Orgvue server. While workforce datasets can be complex they are not high volume in data terms. This architecture enables a high number of concurrent users without impacting individual performance.

Analytics

• Service usage metrics: Yes
• Metrics types: Orgvue can provide usage data: number of users and frequency of activity.
• Reporting types: Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: Easy to select and export data to CSV, PPT or PDF, subject to user permissions.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • TSV
  • PowerPoint
  • PDF
• Data import formats:
  • CSV
  • Other
• Other data import formats: Excel XLS

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Software Service is provided with a 99.5% up-time service availability level.; Orgvue is hosted on resilient AWS infrastructure and in practice Orgvue is highly available.; Orgvue does not offer refunds, not been and not foreseen to be an issue given demonstrated availability.
• Approach to resilience: Orgvue is hosted on AWS with all the benefits of resilience, backups etc that AWS provides.
• Outage reporting: Orgvue publishes availability online.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Username or password
  • Other
• Other user authentication: Single Sign On
• Access restrictions in management interfaces and support channels: Orgvue has a strong flexible user role permissions management capability enabling application of role based access control (RBAC) and attribute based access control (ABAC)
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
  • Other
• Description of management access authentication: Single Sign On incorporating your password and authentication policy

Audit information for users

• Access to user activity audit information: You control when users can access audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: You control when users can access audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: CSA Star, SOC 2 Type 2 Report, ISO 27018
• Information security policies and processes: Orgvue has a formal Information Security Policy and maintains a suite of information security policies which form the foundation of our Information Security Management System (ISMS). These policies are reviewed annually and available for download from the Orgvue Trust Center at https://trust.orgvue.com; Orgvue follows the ISO 27001, ISO 27018, CSA Star and SOC 2 Type 2 standards for information security reporting and management, alongside the independent auditing associated with these standards.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Orgvue software development security is governed through the Orgvue Software Development Policy and Orgvue Development and Releases Processes document. Software development methodology is aligned to OWASP principles for secure development.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Qualys Cloud Agent and Amazon Inspector are installed on all AWS EC2 instances. Vulnerability scans are continuous via Qualys Cloud Agent. These scans are formally reviewed at least weekly by the Information Security team and include web application scanning in combination with OS level scans. The Qualys Cloud Agent solution is implemented across the Orgvue organization, including the Orgvue AWS, corporate server and workstation environments, providing near real-time vulnerability information.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: At the network level, the AWS GuardDuty service is active within the AWS Orgvue environment. AWS GuardDuty is a threat detection service which uses machine learning, anomaly detection and integrated threat intelligence to identify potential threats. GuardDuty spans the entire VPC.; ; GuardDuty, operates within the AWS cloud analyzing DNS requests, VPC traffic flow and CloudTrail events.; ; GuardDuty’s functionality is similar to that of a Network IDS and uses a hybrid approach to detection, meaning it analyses traffic for signature matches as well as monitors for deviations from baseline activity.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: Orgvue commits to notify customers of security incidents which may impact their data within 24 hours. This is formalized in the standard terms and conditions for Orgvue.; ; Orgvue has an established Incident Management process incorporating root cause analysis and corrective action remediation. Incident Managers have direct access to Executive leadership to ensure all appropriate resources are available.; Security incidents are managed through the Orgvue Incident Management Policy and Orgvue Security Incident Handling Policy.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 20%
• Between £500,001 and £1,000,000: 45%
• Between £1,000,001 and £2,500,000: 55%
• Between £2,500,001 and £5,000,000: 60%
• Over £5,000,001: 80%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: BSI
• ISO/IEC 27001 accreditation date: Wednesday 5 February 2025
• What the ISO/IEC 27001 doesn’t cover: The provision of data analytics products using software as a service, with; associated consulting services.
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: Yes
• CSA STAR accreditation date: Wednesday 12 June 2024
• CSA STAR certification level: Level 2: CSA STAR Attestation
• What the CSA STAR doesn’t cover: The provision of data analytic products using software as a service, with associated consulting services in association with ISO 27001 certificate IS 661768
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Cyber essentials plus: No
• Cyber Essentials Alternative: You do not have a current and valid Cyber Essentials Plus certificate, or will not have in place within 12 months of the date of award but have an IASME certified equivalent.
• Other security certifications: Yes
• Any other security certifications:
  • SOC 2 Type 2 Report
  • ISO 27018

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
    • Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual
    • Plans for positive actions with community groups.
    • Measures for making facilities used in the delivery of the contract available for community groups, education or training
    • Collaborating with anchor institutions and community groups to make facilities available for education, training or community events

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition
    • Working conditions which promote an inclusive working environment and promote retention and progression
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Other measures to offer development opportunities for the target cohort(s) in the contract workforce
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
    • Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

• Pricing document

  ODT

• Service definition document

  ODT

• Terms and conditions

  ODT

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at mike.smith@orgvue.com. Tell them what format you need. It will help if you say what assistive technology you use.