XANTURA LIMITED

Reablement App

Reablement is a digital case management platform enabling councils and care providers to support individuals regaining independence after hospital discharge. It tracks SMART goals, manages practitioner visits, scores daily progress, and provides team-based access controls. The multi-tenant system features customisable branding, mobile applications. and configurable workflows per council.

Features

• Goal-oriented assessment and tracking with SMART objectives
• Multi-council support with custom branding and configuration
• Role-based access control for team and council managers
• Real-time progress scoring with flexible measurement systems
• Length-of-stay tracking with automated resident status calculations
• Mobile and web application for field workers
• Assessment start and end hour tracking capabilities
• Responsible manager assignment and oversight functionality
• External identity provider integration for secure authentication
• Configurable feature flags for environment-specific customisation

Benefits

• Increases patient independence through structured goal achievement tracking
• Reduces long-term care costs via effective reablement outcomes
• Managers identify declining residents faster through review flags
• Improves team collaboration with shared visibility of progress
• Enables data-driven decisions for continuous service improvement
• Accelerates hospital discharge planning with coordinated support workflows
• Enhances worker efficiency through mobile access to caseloads
• Delivers council-specific requirements without separate deployments
• Supports gradual care reduction with monitored step-down processes

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at procurement@xantura.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

733836682256350

Contact

Tom Davies
07738 448045
procurement@xantura.com

About your service

• Service categories:

  Applications

  Production and operations

  Service industry and public sector operations

  • Healthcare
  • Adult Social Care
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: - Planned Maintenance (outside of business hours); - Minimum hardware requirements (up to date windows devices with modern browsers)
• System requirements: N/a

User support

• Email or online ticketing support: Yes
• Support response times: As per agreed SLA
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 A
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: As per support agreement, refined based on purchases
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Appropriate training, documentation, and user guides provided as standard
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: We can supply a database compatible export. Data provided continually through usage of the app and associated dashboard suite.
• End-of-contract process: Access to app ceased and cloud infrastructure is securely removed from hosting
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Provided in PDF and video format

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Chrome
  • Safari
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Mobile app provides offline functionality. Visuals are optimised for mobile devices.
• Service interface: No
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: API is used to surface application data for reporting purposes
• API documentation: Yes
• API documentation formats: PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Wording and Branding

Scaling

• Independence of resources: Tool is stress tested using artificial throughput. Hosting infrastructure is scaled to the user requirement.

Analytics

• Service usage metrics: Yes
• Metrics types: Obfuscated user journey data
• Reporting types: Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest: Physical access control, complying with SSAE-18 / ISAE 3402
• Data sanitisation process: No
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: API and proprietary use of our in-house developed transfer methodology.
• Data export formats:
  • CSV
  • Other
• Other data export formats: JSON
• Data import formats: Other
• Other data import formats: N/a

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: As per Support Agreement and refined at each implementation. Azure guarantee 99.95%, in most cases Newton guarantees 95%
• Approach to resilience: All hosting resources have zone redundancy within Azure
• Outage reporting: Email alerts for proactive monitoring

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Application super users will have access to management interfaces and support channels
• Access restriction testing frequency: Less than once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: Between 1 month and 6 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: We are iso27001 accredited, the international standard. We are Cyber Essentials and Cyber Essentials plus accredited
• Software Security Code of Practice: No

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Change management processing following ITIL
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: We employ several means: ; 1 - Secure scope in Defender for Cloud ; 2 - Annual penetration testing; 3 - Package scanning during application and development. ; Deployment will depend on severity. We get our threat information from CVSS and CVE.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We have a network security operations centre team who react to alerts and monitors, and deploy preventative simulations.
• Incident management type: Supplier-defined controls
• Incident management approach: Follows ITIL best practise. Users report incidents through the support portal. We provide incident reports for major incidents post resolution.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Citation ISO Certification Limited
• ISO/IEC 27001 accreditation date: Saturday 30 November 2024
• What the ISO/IEC 27001 doesn’t cover: N/a
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: Citation ISO Certification Limited
• ISO 9001 accreditation date: Tuesday 23 September 2025
• What the ISO 9001 doesn’t cover: N/A
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: B200e4bf-db3d-4277-96a9-9a64f46d66e0
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: F1912ef8-40d5-4829-bd88-15713b65facd
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Volunteering opportunities for staff

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at procurement@xantura.com. Tell them what format you need. It will help if you say what assistive technology you use.