BFB LABS LTD

Lumi Nova integrated with VitaMind Hub for child anxiety

Timely, inclusive and cost-effective access to evidence-based mental health support for children and young people. Lumi Nova is a NICE-recommended digital therapeutic game for 7-12 year olds with anxiety difficulties. It is child-led, guardian-supported, Cognitive Behavioural Therapy-based, and provides meaningful data to commissioners and providers via the VitaMind Hub.

Features

• Instant on-demand access to NICE-recommended first line treatment option
• Story-based psychoeducation
• Goal options for most common childhood anxieties (social, separation, phobias)
• Voice-guided exposure challenges, interactive multimedia exposure modules, gyroscopic environments
• In-app reward system for attempting and completing challenges
• Automated SMS update alerts to guardian and push notification reminders
• Limited gameplay time per session per day
• Real-time data reporting via secure platform (VitaMind Hub)
• Compatible with iOS, Android, Amazon Fire mobile / tablet devices
• Dedicated implementation and engagement support for local pathways & stakeholders

Benefits

• Cost-effective treatment for children in line with whole-family approaches
• Non-stigmatising and inclusive for 7-12 year olds experiencing anxiety
• Reduces waits for access to NICE-recommended support
• Enables self-management anytime anywhere via Cognitive Behavioural Therapy-based approach
• Engages children to set goals and create graded exposure ladders
• Enables users to complete imaginal and in-vivo exposures
• Automatically captures user usage, progress and validated outcome measures data
• Access real-time data for remote monitoring & reporting
• Provides rich data on access, engagement and outcomes
• Can be used standalone for population health approach

£4.50 a unit a year

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at kelly.tham@bfb-labs.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

730478598575945

Contact

Kelly Tham
07717750642
kelly.tham@bfb-labs.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: The VitaMind Hub will require maintenance windows for software updates, patches, and other maintenance activities that will be performed on a quarterly basis or as required in order to contribute to the functionality,stability and security of the service.; Any planned Maintenance and Software updates that will affect downtime will be communicated to end users via email.
• System requirements: Up-to-date web browser

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Within 1-3 business days
• User can manage status and priority of support tickets: No
• Phone support: No
• Web chat support: No
• Onsite support: No
• Support levels: We provide in and out of hours support with specific support processes in place for technical queries and implementation.; ; For technical queries: We provide support via email to all users.; ; For implementation support: We provide extensive mobilisation and implementation support to our customers with a dedicated Implementation team working with relevant stakeholders in a local area to help promote and embed the service in the area.; ; The cost of support is included within the contract value / price.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: For Users: Lumi Nova is designed to be intuitive and provides a guided tutorial within the app for Parents/Guardians and children. Prior to the app setup process, Parents/Guardians are provided with an online onboarding video, terms and conditions of use and privacy statement.; ; Implementation Service for Buyers: BFB Labs collaborates with key stakeholders across relevant places/localities to identify appropriate points of dissemination, and works with relevant operational and clinical leads to help embed provision of Lumi Nova into care pathways and standard operating procedures to ensure families are able to access it quickly and effectively.; ; This includes facilitating a service pathway mapping workshop with key pathway leads to:; ; - Understand the user journeys / existing pathways; - Agree how Lumi Nova will be implemented within the various pathways; - Identify key touch points with families; - Identify support / resources that are needed to maximise usage; ; Training: Virtual Discovery Sessions for professionals signposting ; Virtual or face-to-face Training for professionals using the Hub; ; We also work with relevant communication and engagement leads to identify avenues to cascade information and promote access to Lumi Nova, especially where self sign-up to Lumi Nova is available for families.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Exit planning is discussed at the start of the service so that we can establish expectations and agree processes. Data can be exported in a standard csv format via the VitaMind Hub eliminating the need to transfer data outside of the system. Alternative formats and processes may be available and can be discussed during contract negotiations.
• End-of-contract process: Exit planning is discussed at the start of the service so that we can establish expectations and agree processes. Processes will ensure a safe exit for users and clear information provided as to where else they might be able to receive support. Cut off dates for when new users cannot sign-up, be signed-up to, or use Lumi Nova is communicated. Following the agreed expiry date, we agree with services (the buyer / data controller) what they would like to do with the data. They have the option receive it, after which the data on our servers is anonymised.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Lumi Nova is a native mobile app for children and young people designed to be used on smartphone and tablet devices.; ; VitaMind Hub for professionals is a secure online dashboard/portal designed to be used on laptops or desktop computers via a web browser.
• Service interface: Yes
• User support accessibility: WCAG 2.1 A
• Description of service interface: The VitaMind Hub is a cloud based online platform accessible via a web browser for professionals to manage access to Lumi Nova app and view engagement, progress and outcomes data.
• Accessibility standards: WCAG 2.1 A
• Accessibility testing: None
• API: No
• Customisation available: Yes
• Description of customisation: Lumi Nova app for children: goal selection and associated challenges can be customised by users, in addition to optional accessibility settings. Children can also customise their characters.; ; VitaMind Hub for professionals: certain fields, support information, and area restrictions can be customised to capture data of importance to the buyer.

Scaling

• Independence of resources: We use AWS to manage server usage which automatically adjusts to the needs of the software.

Analytics

• Service usage metrics: Yes
• Metrics types: Key markers of success are collaboratively discussed from the start as part of contract negotiations so that we can establish expectations and work together to ensure success. ; ; The VitaMind hub provides real-time engagement, progress and outcome measures data on users for authorised professionals using Lumi Nova alongside pathways, and for those wanting oversight.; ; We also provide regular anonymised and aggregated reports to the Buyer and key stakeholders, covering the key areas in relation to access, outcomes and if possible, experience (where families opt to provide feedback, as we're a software provider and do not interact face-to-face with users).
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: VitaMind Hub: A data download is automatically made available to authorised users on the 1st of every month that can be downloaded.; Lumi Nova app: Parents/guardians/users are asked to accept privacy policy and user terms and conditions prior to signing up to Lumi Nova. This privacy policy explains how they can ask to access their data (data subject request) by contacting the Data Protection Officer at BFB Labs.
• Data export formats: CSV
• Data import formats: Other
• Other data import formats: Not applicable - no capability to import data

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: We use reasonable endeavours to ensure that the uptime for the VitaMind Hub is at least 99.9% during each calendar month.; ; We may from time to time suspend access to the VitaMind Hub for the purposes of scheduled maintenance and use best endeavours to ensure that all scheduled maintenance is carried out outside Business Hours or during low usage times and give the customer prior written notice of scheduled maintenance that will, or is likely to, affect availability.
• Approach to resilience: Available on request
• Outage reporting: Outages will be reported via email alerts.

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: The VitaMind Hub supports role based access for Buyer's authorised staff to restrict access to high level data/reports and personal identifiable information.; ; Within BFB Labs organisation, access controls are allocated on the basis of business need and ‘Least Privilege’. Users are provided with the absolute minimum access rights, permissions to systems, services, information and resources that they need to fulfil their business role.
• Access restriction testing frequency: At least once a year
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications:
  • NHS DTAC (Digital Technologies Assessment Criteria)
  • NHSE DSP (Data Security & Protection) Toolkit
  • CE marked Class 1 medical device registered with UK's MHRA

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: NHS Digital Technologies Assessment Criteria (DTAC) - NHSE approved; NHS Data Security and Protection (DSP) Toolkit; ICO Registration; CE Mark registered medical device with UK Medicines & Healthcare Products Regulatory Agency (MHRA)
• Information security policies and processes: ACCREDITATIONS:; DTAC approved by NHSE; DSP Toolkit published on NHSE portal; CyberEssentials Certified; ICO registered; ; ADHERANCE TO:; UK's GDPR; DCB0129 Directive; ; POLICIES:; BFB Labs Remote Access Policy; BFB Working From Home IT Security Policy; Data Protection and Confidentiality Policy BFB Labs; Information Governance Policy; Password Policy BFB Labs; Record Retention & Disposal Policy BFB Labs.; ; All policies are reviewed by our DPO and approved by our SIRO who is also our CEO, ensuring a culture that upholds the key principles of information security. Processes for all governance and security aspects, including staff training, data protection and retention, access permissions, risk and incident management, amongst others, are captured within our policies and maintained in our Quality Management System which is overseen by our Compliance Lead.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We assess changes for software & clinical risks, aligning with ISO27001 & our SOPs. All software releases require clinical safety authorisation, considering beta tester feedback. Our unified change management oversees certified medical devices, including SaMD in NHS settings. Four categories guide changes: Minor, Major, Design Change, & Change to Intended Use or New Product. Minor changes are low-risk adjustments but require CATR. Major changes pose medium risk, potentially needing new risk reports. Design changes are high risk, needing full clinical safety assessments. Changes to intended use or new products often require re-certification.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: We contract a CREST-approved service provider who runs annual penetration testing on our system.; ; Vulnerabilities are assessed against OWASP, RAG rated and addressed in line with our risk management standard operating procedures with patches released based on severity and risk.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Our hosting provider, AWS' CloudTrail service provides protective monitoring which enables governance, compliance, operational auditing by alerting BFB Labs of potential compromises.; ; Incidents are addressed in line with our risk management standard operating procedures with patches released based on severity and risk.
• Incident management type: Supplier-defined controls
• Incident management approach: BFB Labs have a pre-defined Incident Management procedure that is triggered in the event of identification of an Incident which has been detected by or reported to BFB Labs through email, telephone or other direct communications.; ; There are 8 stages in the BFB Labs Incident Management procedure:; Logging and Triage; Engagement; Risk Assessment; Replication; Root Cause Analysis; Risk Management / Nonconforming Product Control; Delivery; Closure; ; Each stage involves specific actions and documentation, ensuring comprehensive incident management and resolution.; ; We would provide incident reports via email communication.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Our service facilitates remote care and enables self-management thereby minimising the need for regular face-to-face contact and travel, and reducing emissions caused by service users and clinicians travelling to clinics. Our service can explicitly help the NHS achieve net zero by 2040.; ; We also help promote environmentally friendly practices utilising our digital offer to minimise the need for paper-based resources, reducing the environmental footprint.; ; Data is encrypted and stored securely in AWS (our cloud service provider and data sub-processor) which is powered by renewable energy sources. AWS report to be on track to be powered with 100% renewable energy by 2025.

  Covid-19 recovery

  The upward trend in fears and anxiety in the post Covid recovery phase amongst children is well documented. This has led to the increase in demand for mental health and wellbeing support for primary school aged children, including support for difficulties related to emotionally based school avoidance (EBSA). ; ; Our digital therapeutic game designed with and for children aged 7-12 experiencing difficulties with anxiety provides timely evidence-based mental health support during the crucial years leading up to primary to secondary school transition. It can do this at scale, providing timely early intervention support to a whole generation in line with population health approaches without poaching staff and exacerbating staff shortages.

  Tackling economic inequality

  As a female-led and ethnic minority-led small enterprise striving to innovate, grow and support economic growth at the intersection of the government's key growth sectors of Digital Technology, Life Sciences and Creative Industries, BFB Labs welcomes the collaborative support of Buyers and stakeholders in helping us to fulfill our mission to democratise access to evidence-based support to enable every child to build lifelong skills to manage their mental health - no matter what life throws them.

  Equal opportunity

  Our Self Sign-up access model for Lumi Nova has had an impact on improving access to support in line with CORE20Plus5, specifically along the lines of increasing access to support for children and young people with typically unmet needs, whilst enabling more inclusive support for children with a disability (Equality Act 2010 definition), children from BAME backgrounds, and those living in deprived areas.; ; Through our iterative person-centred design and evidence-based approach we continually monitor our progress along these lines of inquiry and further adapt Lumi Nova and our service offer to be more accessible and inclusive. ; ; BFB Labs is committed to encouraging equality, diversity and inclusion among our workforce, and eliminating unlawful discrimination. We aim for our workforce to be truly representative of all sections of society, our customers, users, and for each employee to feel respected, able to give their best, and feel they belong. This is driven by our mission to build resilience in a whole generation, but also through our shared values. The majority of our employees also have lived experience of mental health challenges.

  Wellbeing

  Anxiety is the most common presenting issue. The median age of onset for the most common anxiety disorders is as young as seven, however there is a gap in support for younger children, where it exists this is usually parent-led. Parents often struggle to commit/engage with parent-led interventions and schools and GPs clamour for direct interventions for children. With workforce capacity issues, many children in the community with mild-moderate needs are often not picked up/ supported early enough when issues first emerge. ; ; Lumi Nova is a NICE-recommended first line treatment delivered via a digital therapeutic game, designed for 7-12 year olds experiencing mild to moderate anxiety with comparable outcomes to routine mental healthcare and shown to reach underserved children and young people. It’s child-led and equips children (and parents/guardians) with the skills to positively self-manage in a non-stigmatising, age-appropriate way whilst providing real time demographic, engagement and outcomes data. It’s CBT- and goal-based and also facilitates parent/guardian involvement in line with whole family approaches. ; ; Families access it via Self Sign-up or practitioners provide access as part of pathways. Self Sign-up would enable any children in an area where Lumi Nova is commissioned to access Lumi Nova without waits, providing instant, on-demand access to evidence-based support (“Getting Help” THRIVE quadrant) at scale.

Pricing

• Price: £4.50 a unit a year
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at kelly.tham@bfb-labs.com. Tell them what format you need. It will help if you say what assistive technology you use.