SIMITIVE LIMITED

Workload Allocation Management System (WAMS)

Simitive WAMS supports the planning, management and modelling for all workloads for all resources. It improves visibility and enables strategic resource planning. It supports data-driven operational decisions including utilisation rates and highlights staff that are overloaded to support well-being.

Features

• Centralised workloads across academic departments
• Resource capacity planning
• Integration with university systems
• Real-time dashboards and analytics
• Support for all workloads and resources
• Self-service portal
• Role based access controls
• Multi scenario modelling
• Statutory reporting
• Rules based calculation engine

Benefits

• Workloads managed in a single platform to remove siloed practices
• Insights into workloads to avoid over allocation and plan staffing
• Reduces manual data entry and errors
• Visibility into workloads for evidence based decision making
• Users access current and historical workloads
• Data for TRAC, EDI and accreditations
• Enhanced security through granular permission sets
• Model multiple resource scenarios to support strategic planning
• Logical calculations replacing complex formulas and algorithms
• Resource planning and forecasting

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@simitive.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

679477092598285

Contact

Devinder Whelan
0117 9117950
info@simitive.com

About the service

• Service categories:

  Applications

  Enterprise resource management

  • Enterprise performance management

  Human capital management

  • Core Human Resources Applications
• Multi cloud support: No

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Simitive products include Teaching Allocation Management System (TAMS), Activity Based Costing (ABC) and Living Review. The ecosystem enables end to end planning to ensure objectives align with workload allocations and support financial sustainability.
• Cloud deployment model: Private cloud
• Service constraints: Maintenance is carried out, outside of business hours with no disruption to usage.; ; Usage is limited by licence to number of users
• System requirements:
  • Only a supported browser is required
  • Internet connection
  • Device capable of running a browser

User support

• Email or online ticketing support: Yes
• Support response times: Standard business hours Support is included in the licence fee.; Additional Support services are available. Calls maybe logged by telephone, email or the Client Support Portal; Response time depends on severity.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: All Clients are provided with an Account Manager, the Client Success Team as well as the Support Team.; Standard Service levels are defined by severity including contractual response times.; Simitive Support also provides the facility for the Client to request Simitive to carry out tasks on their behalf up to and including full outsourcing of the running and management of the system.; Costs are dependent on the level of service required
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Simitive provides a full onboarding service to ensure that Clients realise the benefits expected from the Product.; All onboarding projects include full training and documentation.
• Service documentation: Yes
• Documentation formats:
  • ODF
  • PDF
• End-of-contract data extraction: Clients can download or extract their data at any time either via the standard APIs or via the standard export functionality to CSV.; Should the Client request Simitive can provide the full data export/ download in an agreed format at contract end.
• End-of-contract process: At the end of contract the Client can download all of their data or ask Simitive to provide the download of their data. Once confirmed all Client data is deleted from Simitive systems.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: All Simitive software is responsive and designed to work on mobile devices. The software is compliant with WCAG 2.2 AA.
• Service interface: No
• User support accessibility: WCAG 2.2 AA
• API: Yes
• What users can and can't do using the API: Simitive software includes full JSON Rest APIs secured with OAuth. The system provides full Swagger details.; All data can be managed via the APIs.
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • ODF
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Simitive Products are configurable by the Client without recourse to Simitive. The ability to configure the Product is controlled by granular permissions managed by the Client.

Scaling

• Independence of resources: Simitive AWS environments are autoscaling using orchestrated containerised management to ensure that one Client cannot affect the experience of another.; The environments increase capacity automatically to meet demand.

Analytics

• Service usage metrics: Yes
• Metrics types: Simitive Client Success Team provide availability and usage metrics at each Service review (normally 2-4 times per year).
• Reporting types: Regular reports
• Resource tagging: No
• FOCUS resource tagging: No

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase
  • Degaussing
  • Physical Destruction / Hardware containing data is completely destroyed

Data importing and exporting

• Data export approach: Clients can export their data at any time either through the standard APIs or via the standard CSV export function
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: The service provides 99.9% availability. Clients receive Service Credits for any failure to meet the availability SLA
• Approach to resilience: Simitive AWS environments are autoscaling using orchestrated containerised management to ensure that one Client cannot affect the experience of another.; The environments increase capacity automatically to meet demand.
• Outage reporting: Any outages are communicated to Clients directly by Simitive Support via email to nominated Client Contacts

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Other
• Other user authentication: Simitive Products support and are normally integrated with Clients own Single Sign On system.
• Access restrictions in management interfaces and support channels: Management of Simitive environments is only available to a very small number of users who must be on company enrolled devices, connected via corporate dedicated VPN and using MFA. All access is monitored and recorded.; Support access is only available to select staff who must be on company enrolled and managed devices connected and authenticated via Cloudflare. These users are required to further authenticate onto the Company's own Site Management System (SMS) with MFA. Access of Client sites is via single use token generated by the SMS. All access is recorded and monitored.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Simitive is certified to ISO27001:2022 for all of its operations and as such implement and maintain all of the policies and procedures associated with that compliance.; Responsibility is shared by the Managing Director and Director of Operations supported by Corporate Services and Departmental Managers.; As part of its ISO27001:2022 certification the company carries internal audits and is audited by BSI every year.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: All components and elements of Simitive environments and software are monitored and tracked at all times.; Company processes ensure that all components are maintained at the latest levels and are managed through the Company's SDLC system.; All potential changes are assessed for security impacts and are required to pass various levels of authorisation and approval.; Software development involves both manual and automated testing through defined pipelines ensuring compliance with development, coding and release processes.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: All environments are monitored by Simitive tools and by AWS Security Hub to identify any potential vulnerabilities and dependencies (CVE). Simitive tools also monitor actual attacks to identify any new approaches or changes in approaches.; All vulnerabilities are analysed for impact and pass a formal testing process prior to roll out.; All security patches are implemented within 24 hours.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Simitive environments are monitored continuously by AWS GuardDuty, AWS Security Hub and AWS Cloudtrail as well as the company's own monitoring system. Simitive SysOps and Directors are automatically alerted.; Any compromises or potential compromises are managed under the company's ISO27001 Data Breach Policy and Procedure.; Incident response is immediate (as soon as alerted) and follows a defined process involving Sysops and Directors.
• Incident management type: Supplier-defined controls
• Incident management approach: As part of its ISO27001:2022 Certification the company maintains an audited and compliant defined process for incident management. All incidents whether actual or potential are managed through the same process. This includes those reported by the company's monitoring systems as well as those reported by staff or Clients.; All incidents or potential incidents are recorded through the same incident reporting process and documentation, clearly identifying the exact timelines, identified root cause and remedial actions.; Incident reports form part of the Company's internal and external audit process ensuring that resultant actions are completed.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Standards and certifications

• ISO/IEC 27001 certification: Yes
• ISO/IEC 27001 accredited by: BSI
• ISO/IEC 27001 accreditation date: Sunday 3 December 2023
• What the ISO/IEC 27001 doesn’t cover: All areas of the business are included and covered
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: Yes
• CSA STAR accreditation date: Sunday 4 January 2026
• CSA STAR certification level: Level 1: CSA STAR Self-Assessment
• What the CSA STAR doesn’t cover: All covered
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: 8ffcbbda-52d2-4675-8fd0-0cbb45edbd55
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: No

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

  • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
  • Plans to engage the contract workforce in deciding the most important workplace issues to address
  • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
  • Activities to cascade good practice on fair working conditions throughout the supply chain
  • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
  • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
  • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
  • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
  • Volunteering opportunities for staff
  • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
  • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
  • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain

  Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

  • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications

  Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

  • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
  • Plans to respond flexibly and adapt approaches to community engagement and initiatives
• Mission: Make Britain a clean energy superpower:

  To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

  Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

  • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
  • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
• Mission: Break down barriers to opportunity:

  By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

  Policy Outcome 6: Employment and training: For those who face barriers to employment

  • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
  • Creation of employment opportunities particularly for those who face barriers to employment, such as prison leavers, care leavers and/or who are located in deprived areas, and for people in industries with known skills shortages or in high growth sectors
  • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
  • Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition
  • Working conditions which promote an inclusive working environment and promote retention and progression
  • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
  • Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

  Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

  • Understanding of the issues affecting the development of new skills by target cohort
  • Other measures to offer development opportunities for the target cohort(s) in the contract workforce
  • Understanding of issues relating to entering the contract workforce
• Mission: Build an NHS fit for the future:

  That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

  Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

  • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
  • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@simitive.com. Tell them what format you need. It will help if you say what assistive technology you use.