KIVUE LIMITED

KIVUE PERFORM Project Portfolio Management Platform (PPM Solution)

Perform is a project and portfolio management optimisation (PPM Solution) tool with intuitive user interfaces for anyone to use. Instant access to concise & visual insights on multiple devices anywhere. Perform is a standalone solution or can integrate with other systems providing an engaging front end.

Features

• Real time executive portfolio insights, visual reports and escalations
• Visibility of history for RAG, milestones, project reports etc.
• Meeting ready automated slide formats and visual report templates
• Web & mobile access for executives, optimised for multiple devices
• Automated reports for projects and portfolios with executive dashboards
• The ability to integrate with other systems across the organisation
• Instant option to share escalation alerts with sponsors and stakeholders
• Intuitive user interfaces for data inputting and executive viewer access
• Project prioritisation module to prioritise deployment of budgets on projects
• Increased security and user management with Single Sign On

Benefits

• Prioritsed allocation of funds on projects aligned to strategic drivers
• Improve engagement with portfolio information to engage leadership when needed
• Run governance meetings directly on Perform, no PowerPoint and Excel
• Easy access for key stakeholders across multiple devices
• Automated report production to reduce manual time, effort and cost
• Transparency and audit trail of key milestone and report history
• More agile leadership response to escalations, enabling accelerated delivery
• Accessible and easy to use assuring portfolio input completion rates
• Launch in days generating immediate impact and value.
• Improved security, instant access and easier user management

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ben.taylor@kivue.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

705553008013923

Contact

Ben Taylor
07809 421110
ben.taylor@kivue.co.uk

About the service

• Service categories:
  • Applications
    • Enterprise resource management
      • Project and portfolio management
        • Project and portfolio management
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: We have regular maintenance updates but these are usually out of hours and notified in advance. Our service hours are from 8:00 to 18:00 Monday to Friday excluding public holidays
• System requirements:
  • Internet / Network Access
  • Use of approved browser

User support

• Email or online ticketing support: Yes
• Support response times: During Support Hours which are 8.00 - 18.00, Monday to Friday, Critical and High Priority issues will be initially responded to within 1 hour of ticket being registered. Minor, Cosmetic or General queries will be answered within 8 hours of ticket being registered
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes
• Support levels: A Perform licence will include telephone or email support 8 to 6 (UK time), Monday to Friday. Each customer has their own technical Customer Support contact who will handle and process any technical or usage questions. Normally on a phone call. Queries are dealt with in rotation rather than by any form of premium payment. There is a defined escalation process for unresolved queries.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Kivue provide a full and robust training capability using experts in both portfolio management and the use and management of Perform. The Kivue team will provide the training either via ‘Train the Trainer’ approach or by doing the training using our own team of experts. Kivue will either deliver training on site or via online platforms to support staff based in disparate locations. ; ; Kivue Perform is extremely intuitive and is not hard to learn but during the initial period of mobilisation of and familiarisation with Perform, Kivue provide access to the Customer Support team as required and will also run ‘Drop In’ clinics to enable users to ask any questions and explore how to get the best out of the platform.
• Service documentation: Yes
• Documentation formats: PDF
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: For each customer we customise a user guide in pdf format including a PM guide, PMO Guide, Administrator Guides & Viewer guides. Any special functionality in the instance is covered by 1-page guides. Finally, we also have new release guidance notes for each new release of functionality. These pdf documents are sent as required. In addition, we can make them available as hard copies.; Any new instances are encouraged to have training sessions either in person or remotely. These sessions are accompanied by shared screen so that the procedures can be seen.; Finally, we are working through a series of training videos with English sub-titles covering most of the common features covered in the formal training sessions. These will be available on-online.
• End-of-contract data extraction: At the end of the contract, any relevant customer data can be downloaded as csv files.
• End-of-contract process: Clients can output any reports they require themselves, data can be downloaded as a csv file, or a copy of the sql database can be provided, then the all data is deleted. This is included as part of the service and additional bespoke requirements can be costed individually.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The output from Kivue Perform is visual and the arrangement of the windows in the various views adjusts to suit the sizer of the screen. In certain views it can be configured to show what is important when viewed on that particular device. Kivue Perform also has a Mobile App - available on iOS and Android.
• Service interface: Yes
• Description of service interface: Kivue Perform is accessed via a standard list of approved browsers. You are taken to a login page. Username and password access is provided as standard, these should be unique per user. Alternatively Single Sign On or Multi Factor Authentication can be provided. Once logged in, you are taken to the user dashboard where the various screens or modules can be accessed.
• Accessibility standards: None or don’t know
• Description of accessibility: • Most graphs and other outputs have a data table or similar which can be read by screen readers. ; • Output is via standard web browsers so will comply with any individual settings; • Output is in colour but can be read in greys and is mainly supported with alphanumeric titles, most include hover hints.; • Programme to incorporate tabbed progression to enable keyboard only entry; • We are very happy to assist with configuration changes to the programme to allow any reports or outputs to be as accessible as possible.
• Accessibility testing: Testing has been undertaken using standard browser tools for reading, zooming and some testing without mouse availability.
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: Kivue's APIs are predominantly used for importing uploaded content or pushing content to APIs or data services exposed by our clients perhaps to link in with 3rd party software running at the clients (example Finance system or Enterprise Risk Register).
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Perform configuration can be broken down into 3 areas.; 1. User Configuration. There are a number of changes users can make to view relevant information in the desired format. Information can be filtered to show what is needed, then grouped and sorted to give the chosen view. These settings can be saved for re-use with the MyPerform functionality.; 2. Client Administrator. The appointed administrator(s) – a customer user team member - can make a number of changes ‘system wide’ so that all users would be subject to these changes. Terminology of programme governance (e.g. lifecycles and programme gates) can be configured, as well as the information which is displayed on certain pages like the Programme Strips and Portfolio on a Page Dashboards. Permissions can also be set on the site to control which users can see which individual pages, or which programmes can be seen from the portfolio.; 3. Kivue Customer Support. There are a number of fundamental configurations that Kivue Customer Support can setup during the configuration and implementation phase of the instance. Such as the programme reporting calendar, the layouts of the Tabbed Dashboard and Projector Views and building of bespoke forms to capture non-standard information.

Scaling

• Independence of resources: Kivue Perform is a single tenancy database (each customer gets their own database) This allows us to horizontally scale out for heavy users of Perform.

Analytics

• Service usage metrics: No

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Tab delimited csv file or pdf
• Data export formats:
  • CSV
  • Other
• Other data export formats: .pdf
• Data import formats: Other
• Other data import formats: Data is entered manually

Data-in-transit protection

• Data protection between buyer and supplier networks: IPsec or TLS VPN gateway
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Perform can generally be expected to be available 24 hours per day, 365 days per year, with the exception of any regular or agreed Scheduled Outages. Perform support will be available throughout Normal Service Hours, defined as 0800 to 1800 (UK Time), Monday to Friday, excluding UK (English) Public Holidays, and excluding any periods of unavailability agreed in advance between Kivue and the customer. ; ; Periodically, the service may need to be suspended to Perform platform upgrades, release new versions of Perform, or other maintenance activities. These activities are undertaken at our sole discretion, and will generally be performed outside Normal Service Hours to avoid inconvenience to the customer.; ; Such periods of unavailability for Scheduled Outages outside Normal Service Hours will not exceed a total of 3 hours per month, and will be communicated to the customer in advance. Any exceptional requirement that requires the service to be unavailable outside Normal Service Hours for a duration that exceeds this level will be discussed and agreed with the customer in advance, as would any requirement to make the service unavailable within Normal Service Hours.
• Approach to resilience: DataCentre is ISO27001 approved, further details can be supplied on request
• Outage reporting: The system is monitored 24 hours, 7 days a week for any outages. During office hours any outage is alarmed in the main office, out of hours nominated staff receive calls on outage.; An email is sent internally to key staff and customer facing staff to make them aware of the situation and estimated time to restoration of service – once known. These internal emails continue until service is restored; they will update estimate for full service as well as any updates on causes.; Customer services will contact all ‘main contacts’ at our customers by email, with details on how badly the service is affected, and any other information known such as estimated time for repair / recovery and information on causes. We will then send regular update emails until resolution. Once the system is working normally again, a final email will be sent to confirm that the system is back as usual, and any steps taken to avoid re-occurrence.; Once the outage is resolved, an Incident Report is created. This is normally for internal circulation, but it can be made available on request to main contact at a customer.

Identity and authentication

• User authentication needed: Yes
• User authentication: Multi-Factor Authentication (MFA)
• Access restrictions in management interfaces and support channels: Single Sign On via ADFS Authentication is also possible.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Software Security Code of Practice: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Our ISO27001 certification encompasses a number of policies. These policies include a variety of checks on employees and sub-contractors as well as policies governing their activities, both in the office and when working off site. We have policies covering use of remote access, password specification and mobile phones and laptops. They also cover the storage of any confidential information whether physical or digital, combined with a clean desk policy and a full set of Health and Safety policies. We have a monthly internal audit to check compliance with these policies and with our stated Business Management System, recommending updates to a management board for implementation. The Management board consists of senior managers and directors. This board sits on a quarterly basis. In addition to the audits we have policies covering any data breaches, any security incidents, together with a comprehensive logging system to capture activity on our system and network. All our internal documents have a security rating applied at the creation level, and our classifications are regularly reviewed and amended if required. Our hosting provider is also ISO27001 – Information Security Management, ISO9001 – Quality Management, ISO22301 Business Continuity Management approved, amongst others, and they are listed on G-Cloud.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: These processes are externally audited on annual basis and form part of our monthly internal audits to check that they are in compliance with ISO27001 and our Business Management System Document.
• Vulnerability management type: Undisclosed
• Vulnerability management approach: These processes are externally audited on an annual basis and form part of our monthly internal audits to check that they are in compliance with ISO27001 and our Business Management System Document.
• Protective monitoring type: Undisclosed
• Protective monitoring approach: We review access logs to the system daily and would see any access attempts to Perform. Any such data breach would be handled in line with our Data Breach Policy with the relevant senior management involved from the first notification. This policy forms part of our ISO27001 certification review.
• Incident management type: Undisclosed
• Post-quantum cryptography secure: No
• Incident management approach: We have an established Incident Management Process for any relevant incident. This involves an investigation and completion of an incident report, which is circulated to senior Management and relevant team members. This forms part of our ISO27001 process.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: Option 1: Demo (no cost) ; A full online or on site demonstration of Perform ; Option 2: Free Trial/ Data Build (no cost) ; We create your own instance of Perform for 10 days to load up some of your portfolio so you can explore how it will work in your environment
• Link to free trial: https://www.kivue.co.uk/contact.html

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 2%
• Between £500,001 and £1,000,000: 5%
• Between £1,000,001 and £2,500,000: 6%
• Between £2,500,001 and £5,000,000: 8%
• Over £5,000,001: 12%

Standards and certifications

• ISO/IEC 27001 certification: Yes
• ISO/IEC 27001 accredited by: British Assessment Bureau
• ISO/IEC 27001 accreditation date: Tuesday 4 March 2025
• What the ISO/IEC 27001 doesn’t cover: Nothing
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: A912c4b4-96bc-4aee-9ad5-5777d8c82e23
• Cyber essentials plus: Yes
• Cyber Essentials Plus Certificate Number: 1d5aafe9-553a-4c43-983a-6d594cb87e6f
• Other security certifications: No

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

  • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
  • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
  • Plans to engage the contract workforce in deciding the most important workplace issues to address
  • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
  • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
  • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
  • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
  • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
  • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
  • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
  • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
  • Volunteering opportunities for staff
  • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
  • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
  • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling

  Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

  • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
  • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
  • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
• Mission: Make Britain a clean energy superpower:

  To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

  Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

  • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
• Mission: Break down barriers to opportunity:

  By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

  Policy Outcome 6: Employment and training: For those who face barriers to employment

  • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
• Mission: Build an NHS fit for the future:

  That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

  Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

  • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
  • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
  • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ben.taylor@kivue.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.