220452345

BrightSafe / Health and Safety Software

BrightSafe is an online health & safety software that offers you smart tools, advisory, and support services that help you protect your business against over 600 potential health & safety risks.

Features

• Risk Assessments
• Accident Reporting
• Near-Miss Reporting
• Hazard Reporting
• Document Storage
• Task Management
• E-Learning
• Method Statements
• Document Library
• Sector Specific Content

Benefits

• Proactive Health and Safety Management
• Reactive Health and Safety Management
• Information and Training
• Manage Risk on the Move in Real-Time
• Access Content on the Move
• ISO 27001 and Compliance with GDPR
• Easy to Use
• Fixed Price
• Access to Support from Highly-Trained Professionals
• Cloud-Based for Unlimited Storage

£6.00 to £12.00 a user

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at g-cloud14enquiries@brighthr.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

759348748925044

Contact

BrightHR G-Cloud 14 Sales Enquiries
0800 756 0847
g-cloud14enquiries@brighthr.com

Service scope

• Software add-on or extension: Yes
• What software services is the service an extension to: Employee and site data is stored in BrightHR which is seamlessly integrated into BrightSafe so that there is one version of this data that is used by all Bright applications.
• Cloud deployment model: Public cloud
• Service constraints: Clients will need to have access to BrightHR to use BrightSafe.
• System requirements:
  • Company Subscription Required
  • Internet Access Required

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Our SLAs for webchat are 18 seconds for a response and 15 minutes for a resolution; our SLA for email is 4 business hours for a response; our SLA for technical inbound support is under 8 seconds for a call to be answered, and; our SLA for advice is also under 8 seconds for a call to be answered. One of our key differentiators is that we offer a 24/7 helpline for advice and support; this helpline is staffed by industry professionals and complements the available software, ensuring constant service delivery responses.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Web chat
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: Our web chat is accessible in the following ways: users utilising a screen reader are able to navigate through the widget; users interacting solely with a keyboard can fully interact with the widget; visually impaired users can interact with the widget in a high-contrast state; there are hover states for all buttons and links which can visually change when hovered over or tabbed to, and; messages received in live chat can be read out loud and verbally differentiate between the end user and agent. Our web chat is WCAG 2.1 Level A compliant.
• Web chat accessibility testing: We haven't tested web chat with assistive technology users.
• Onsite support: Yes, at extra cost
• Support levels: Our support is provided in various forms. We start with an onboard which will be delivered digitally via the product or over a video call with an Account Manager. On-site implementation can be provided if required, provided by an Account Manager. We also offer telephone and web chat support between the hours of 9:00 to 5:30 (UK time), Monday to Friday with a 4 business hour SLA for telephone support and 18 second response / 15 minute resolution SLA for web chat. We also offer digital guides, FAQs and video recordings of feature demonstrations via our online support centre.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We provide an activation call to all new clients to welcome them to the service. Product training is offered to all clients, in addition to on-demand onboarding material and content libraries (containing user guides, in-product guides, and instructional videos). The content libraries are available at any time throughout the life of the contract, in case the client wants or needs to refer back to them. One of our key differentiators is that we offer a 24/7 helpline for advice and support; this helpline is staffed by industry professionals and complements the available software.
• Service documentation: Yes
• Documentation formats: HTML
• End-of-contract data extraction: Clients are able to export their data themselves, via the features available in product, before their contract comes to an end. Once the contract has ended, data extraction is on request.
• End-of-contract process: Migrating data from our products to another solution is a consideration we take seriously. While our products are designed to deliver a comprehensive and seamless experience, we also understand that business needs can evolve. Our approach includes data portability, migration support, integration capabilities, and data security and compliance. At the end of the contract the user would be able to log into their accounts, but access to the products would be restricted once the end date of the agreement has been reached. Once the contract end date has passed, users will only be able to access the software account screen not view the specific products themselves.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The application is web-responsive, so it works in the same way on any browser on any device. We have a BrightHR mobile application, which is available on Android and iOS. We also have applications available for Clocking-In ('Blip') and Expenses ('PoP'), both of which are available on Android and iOS too.
• Service interface: No
• User support accessibility: None or don’t know
• API: No
• Customisation available: No

Scaling

• Independence of resources: We guarantee that users aren't affected by the demand other users place on our service through the automatic scaling of computer resources, the use of CDN for web application front ends, and the monitoring of SQL server capacity. We use Microsoft Azure to power our platform; Azure offers scalability, enabling us to easily adapt to varying workloads and user demands. This means that as the user base fluctuates, we can seamlessly scale our resources up or down to meet the requirements without interruptions to our services.

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Staff screening not performed
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Physical access control, complying with CSA CCM v3.0
• Data sanitisation process: No
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Users can export their records for risk assessments, method statements, hazard reports, accident reports, and near miss reports individually using the 'Print' option.
• Data export formats: Other
• Other data export formats: PDF
• Data import formats: Other
• Other data import formats: Text Entry

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: We have different SLAs depending on the channel of choice used. Our SLAs for webchat are 18 seconds for a response and 15 minutes for a resolution; our SLA for email is 4 business hours for a response; our SLA for technical inbound support is under 8 seconds for a call to be answered, and; our SLA for advice is also under 8 seconds for a call to be answered. It is so rare that the SLA is not met that there is no standard offer made - this would be reviewed on a case-by-case basis with some form of service discount or offer provided as a solution, as well as preventative steps put in place to prevent this from happening moving forward. This would be agreed with your Account Manager.
• Approach to resilience: Available on request.
• Outage reporting: We offer a public dashboard which is available via https://stats.uptimerobot.com/2DgmLIVEBj. This public dashboard shows the current organisational status (live or offline), broken down by sector.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Username or password
• Access restrictions in management interfaces and support channels: Access is restricted by role based access control (RBAC). We implement standard authentication mechanisms to verify user identities, and our access control framework is designed around user roles and their specific data access requirements to ensure the provision of our service. Within our system, we offer varying levels of granularity and flexibility in managing access controls. RBAC ensures that users can perform their duties efficiently and securely without unnecessary access to unrelated information. Single-sign on (SSO) is also available, which includes integration with popular identity providers such as Google, Apple, and Microsoft.
• Access restriction testing frequency: At least once a year
• Management access authentication: Identity federation with existing provider (for example Google Apps)

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: Between 1 month and 6 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: Between 1 month and 6 months
• How long system logs are stored for: Between 1 month and 6 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Bureau Vertias
• ISO/IEC 27001 accreditation date: 09/06/2023
• What the ISO/IEC 27001 doesn’t cover: No exclusions in the statement of applicability.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: Yes
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: We have a dedicated InfoSec Team and Internal Audit Team to ensure that all compliance is adhered to, including that all security policies and processes are followed.

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: We operate a defined process for delivering configuration changes to production, using infrastructure as code, which passes through peer review and testing on pre-production environments. Peer-review and audit environments track the service components through their lifetime as well as assessing changes for any potential security impact(s).
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: We follow ISO 27001 and Cyber Essentials Plus requirements which outline all of our vulnerability management processes.
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: We have SIEM in place with analysts constantly monitoring and responding to alerts and threats. We have different playbooks for different incidents or alerts.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: We follow the NIST Framework which outlines all of our incident management processes.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Our business revolves around providing software solutions to businesses around the world, helping reduce their carbon footprint by negating the need for any paper. Before using our software, a lot of businesses were still using paper forms to manage their basic HR duties such as creating rotas, manage expenses, store documents and organising staff holidays. We help reduce the amount of paper by offering a fully digital software solution made to manage any business’s HR, health & safety, and payroll. We also digitise document management by providing secure and unlimited document storage while also providing hundreds of digital templates encouraging our users to keep everything digital. We’re all about empowering our users. As part of our free learning management system for all BrightHR users, we have a CPD certified e-learning course on sustainability, supporting them to become more aware and help fight climate change. While we help our clients have a positive impact on climate change, we can only do this by being experts ourselves and leading by example. We have the ISO50001 which recognises best practices in energy management and ISO14001 which shows we are taking proactive measures to reducing our environmental footprint. Some actions we’ve taken to improve our own environmental impact range from recycling 100% of our waste, to having planning permission to be the first offices in Manchester to build our own hydro wheel to help power the building.

  Covid-19 recovery

  As a company that puts our users first, we knew we had the people and technology to help throughout Covid 19 and beyond. During the pandemic we created a resource hub, available to everybody, not just our users. Filled with blogs and articles written by our employment law experts to help businesses navigate the ever-changing rules and regulations. As businesses started to re-open and started bringing their staff back into the workplace, they needed the right health & safety documents and to follow the right processes to get back into business. From the government announcement that businesses can reopen, our experts produced documents such as Covid risk assessments and back to work guides for all industries. Another large factor to get businesses up and running were vaccines for workers. We developed a new product called VaccTrak, which helped over 86k businesses keep a log of which of over 1.4 million staff vaccinations and boosters. We wanted to help all businesses, so we made this product free for everyone to use. As a lot of businesses struggled financially throughout the pandemic and after, which is why we also developed BrightExchange, a place for businesses to promote their products and services, while doubling up as an employee perk platform. This is completely free for all our clients to use. Since launching, we’ve had over 18,000 ads created and accessible by over 1 million shoppers. Hybrid and remote working became more common after the pandemic. This caused issues for businesses who were struggling to track remote workers. And again, we saw a problem and offered the solution, by developing Blip, our time-tracking app. Blip allows businesses to allow remote working with geolocation tracking; as of May 2024, over 63 million staff have tracked their working hours with Blip.

  Tackling economic inequality

  Our vision is to give businesses a brighter future, and that’s achieved by offering businesses an all-in-one solution that saves all businesses money and time. To achieve this, we offer fixed pricing on all our contracts, meaning if a business expands, or even doubles in size, throughout the period of their contract, their price of BrightHR doesn’t increase. By doing this, we’re helping empower businesses by giving them set costs which they know won’t be rising, so they can use the additional resources to invest in growth. To make it as easy as possible for businesses to see the value of what they will get with us, we’ve developed Payback calculators which shows how much money businesses can save a year. For example, a business with 6-10 employees could have costs of around £27,392 a year, but with BrightHR those costs reduce to £2,880. We also offer free unlimited-use products to our customers, which are used by smaller businesses who might not be able to afford additional support. These free products start with Bright BrAInbox which is an AI-powered HR, health & safety, and payroll question and answer platform. Not only is Bright BrAInbox free to use for our customers, but with our aim to help all businesses, we’ve made our instant advice platform available for everyone to use. So far, it’s helped businesses answer over 500,000 HR, health & safety, and software questions. While larger businesses will have an advertising budget, many SMEs don’t. This is where BrightExchange helps bridge the gap between smaller and larger businesses. It’s an online marketplace allowing our customers advertise their business for free to over 1 million prospective customers worldwide. BrightExchange also doubles up as an employee discount platform, letting businesses offer their staff cost-saving perks at no extra cost to the business.

  Equal opportunity

  Our basic package includes a full learning management system, which helps businesses upskill their staff and managers. They can use the system to keep track of who has completed their assigned courses. As part of our learning management system, we have several CPD certified courses that help educate and create a healthier and safer working environment for all employees, such as ‘Equality, diversity & inclusion awareness’, ‘Equality at work’, and ‘Neurodiversity’. While we understand educating staff on equal opportunities is a step in the right direction, we wanted to do more. Our employment law experts have written an equal opportunities policy for businesses to use, along with expert articles available on our website that’s accessible to everyone. To ensure our users are getting the most up-to-date information and advice around equal opportunities, we cover equality, diversity, and inclusion in all inductions, while making a CPD accredited e-learning course available to all staff.

  Wellbeing

  Employee wellbeing has become a vital part of how businesses are run, and we offer businesses the tools to have a positive impact on their employees wellbeing. Our online HR document library contains hundreds of documents, policies and templates that are written by our experts and can be implemented with ease, such as the Employee Wellbeing Policy, which promotes employee wellbeing and offers counselling as an additional service. As part of our learning management system, we offer CPD certified and RoSPA assured e-learning courses on topics such as mental health awareness and managing stress in the workplace. Helping upskill businesses and their staff to understand the importance of wellbeing, the impacts of bad wellbeing, and how to help improve staff wellbeing. Since launching our e-learning in January 2023 it’s been widely used by all our clients, with over 350,000 courses being completed so far. We also develop our product to make it easier for managers to help keep an eye on their staffs' wellbeing. For example, our Annual Leave Balance feature allows managers to get a snapshot of all their teams remaining annual leave and displays it in a traffic light colour code depending on how much leave has been booked and taken. The less annual leave booked and taken increases the likelihood of staff burnout. This Annual Leave Balance feature can help managers spot and prevent staff wellbeing declining before it’s too late.

Pricing

• Price: £6.00 to £12.00 a user
• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: Yes - BrightSafe Lite is a product which allows for the reporting of accidents and near misses, and contains a document library containing useful H&S-related documents. There is no limited time period.
• Link to free trial: https://account.brighthr.com/signup?product=brightsafe

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at g-cloud14enquiries@brighthr.com. Tell them what format you need. It will help if you say what assistive technology you use.