SS&C Blue Prism Enterprise Robotic Process Automation (RPA) & Intelligent Automation (IA) platform

Service scope

Software add-on or extension: Yes, but can also be used as a standalone service
What software services is the service an extension to: BPM, ERP, ITSM, CRM and multiple Clinical Systems such as EMR
and EHR
Cloud deployment model: Public cloud

Private cloud
Service constraints: When installing the SS&C Blue Prism applications into an environment, customers must adhere to the minimum system requirement as stated in the technical architecture documentation.
System requirements: Interactive Client

Runtime Resource

Application Server

Database Server

Web Server

User support

Email or online ticketing support: Email or online ticketing
Support response times: Priority 1 Response within one hour. Blue Prism will use Continuous
Effort, within Service Hours, to resolve the Fault within 12 Service
Hours. Priority 2 Response within four hours. Fault resolved by the end of the following three Business Days. Priority 3 Response within one Business Day. Bug fix scheduled for the next available release. Priority 4 Blue Prism shall consider such issues or requests in the light of other Customer requirements and will advise what action will be taken to address the issue.
User can manage status and priority of support tickets: Yes
Online ticketing support accessibility: None or don’t know
Phone support: Yes
Phone support availability: 9 to 5 (UK time), Monday to Friday
Web chat support: Web chat
Web chat support availability: 9 to 5 (UK time), Monday to Friday
Web chat support accessibility standard: None or don’t know
How the web chat support is accessible: Via creation of a support ticket.
Web chat accessibility testing: None.
Onsite support: Yes, at extra cost
Support levels: SS&C Blue Prism customers are supported by all in-house resources.
Production Support is included in the annual license for no additional
fee. Production Support: All customers have access to our full database
of online troubleshooting and training resources and can open cases
using the customer web portal. It includes authorisation for up to 10
contacts to open support tickets and guaranteed email support during
normal business hours for the country of purchase. For urgent issues
(P1), our support staff will respond within one hour. You will also receive
access to our online support resources and community forums.
Business Critical Support: This is designed to meet the needs of
customers who have deployed mission-critical automations,
guaranteeing 24x7 support and availability and prompt response time
and resolutions. In addition to quarterly meetings and regular reviews of
support cases, you will benefit from a designated support team who will
be familiar with the specifics of your deployment and can quickly provide
customised support to ensure that you are receiving the maximum
benefit and success from your Blue Prism investment.
Support available to third parties: Yes

Onboarding and offboarding

Getting started: Blue Prism University contains free training curriculum available to
anyone who registers. Available courses include Product Induction,
Foundation and more. These courses are offered online (CBT) via Blue Prism Portal. Robiquity also offer online, on-site and in-person training. In addition to this, comprehensive documentation covering all aspects of Blue Prism is provided electronically via the Blue Prism customer portal. Blue Prism also provides a customer forum and knowledge base to encourage collaboration, support and idea sharing.
Service documentation: Yes
Documentation formats: HTML

PDF

Other
Other documentation formats: Searchable Knowledgebase accessible via internet using web browser.

Online Customer forum accessible via internet using web browser.
End-of-contract data extraction: SS&C Blue Prism does not pertain or archive data used by automations
during processing. Audit logs are exportable as .CSV SS&C Blue Prism
Automation process designs are exportable as XML based export
formats.
End-of-contract process: As this solution would reside on the customer's own private cloud infrastructure, any data can be retained and maintained by them. For On-Premise solutions, access to support services and updates ceases on end of contract.

Using the service

Web browser interface: Yes
Supported browsers: Internet Explorer 11

Microsoft Edge

Firefox

Chrome

Safari
Application to install: Yes
Compatible operating systems: Windows
Designed for use on mobile devices: No
Service interface: Yes
User support accessibility: None or don’t know
Description of service interface: SS&C Blue Prism tools are installed locally within your cloud environment. Some components are accessed via a web browser.
Accessibility standards: None or don’t know
Description of accessibility: Users access Blue Prism Enterprise via individual Role Based Access.
Accessibility testing: User interfaces have been designed along WCAG AA guidelines and Blue Prism QA process includes compatibility checking.
API: Yes
What users can and can't do using the API: SS&C Blue Prism can expose any object or process via SOAP/REST
requests to enable external applications to call automations, and can
interact with existing applications and services API in various manners, including a built in REST capability. SS&C Blue Prism digital workers are not limited to interacting with target applications via the GUI, and can also interact via API. The Blue Prism Digital Exchange (DX) provides an online "marketplace" of prebuilt API integrations; these cover a variety of intelligent automation skills (learning, vision, problem solving, collaboration, planning & sequencing, and knowledge & insight) and enable drag-and-drop integration into ML/AI APIs offered by the likes of Google, Amazon, Microsoft, and even custom-built solutions.
API documentation: Yes
API documentation formats: HTML

PDF
API sandbox or test environment: No
Customisation available: Yes
Description of customisation: SS&C Blue Prism allows appropriately permissioned users to create
custom automations suitable to the buyers needs as well as provide a host of administrative and operational functions to configure the
environment specifically to the buyers needs. Examples include (but are not limited to) - Custom Process Discovery, Capture and Design -
User/Group/Role configuration - Configure Operational and Business
reporting - Environment Configuration and Management SS&C Blue
Prism provides a variety of methods to do this suitable to the role and
needs of the users or groups involved.

Scaling

Independence of resources: As this SS&C Blue Prism Enterprise instance would be provisioned on the customer's own private cloud, then it would be the customer's responsibility to provide a scalable and high performance environment to meet their individual needs. It's the customer's operations teams' responsibility to monitor the solution continuously to proactively manage and/or resolve any service issues (or possibly by calling SS&C Blue Prism support helpdesk).

Analytics

Service usage metrics: Yes
Metrics types: SS&C Blue Prism provides a number of options for reporting metrics, KPIs and analytics. Dashboard: An information dashboard is presented to each user. Its configurable and enables
users to define and present role-specific graphical reports. System MI: Provides the capability to analyse process execution data and return valuable insights regarding the process. The output can take various forms including XLS, DOCX, PDF, CSV, etc and external BI tools In process reporting: possible to use automation processes themselves to generate reports allowing the automatic generation of relevant information.
Reporting types:
• Through an API
• Real-time dashboards
• Regular reports
Reporting types: API access

Real-time dashboards

Regular reports

Resellers

Supplier type: Reseller providing extra features and support
Organisation whose services are being resold: Blue Prism

Staff security

Staff security clearance: Other security clearance
Government security clearance: Up to Security Clearance (SC)

Asset protection

Knowledge of data storage and processing locations: Yes
Data storage and processing locations: United Kingdom
User control over data storage and processing locations: Yes
Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency: Never
Protecting data at rest: Physical access control, complying with CSA CCM v3.0

Physical access control, complying with SSAE-16 / ISAE 3402

Physical access control, complying with another standard

Encryption of all physical media

Scale, obfuscating techniques, or data storage sharding
Data sanitisation process: Yes
Data sanitisation type: Deleted data can’t be directly accessed
Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data export approach: Appropriately permissioned users can export log and process data via
Secure Remote Desktop connection to the platform. Blue Prism
Automations can also provide data exports as part of their operation in a
number of formats and delivery mechanisms (such as as operational
reports via email).
Data export formats: CSV
Data import formats: CSV

Other
Other data import formats: XML

Tab Delimited

Excel

PDF

Data-in-transit protection

Data protection between buyer and supplier networks: Other
Other protection between networks: SS&C Blue Prism Enterprise is hosted in the Client's Private Cloud instance. There is no transmission of data between SS&C Blue Prism and the Client.
Data protection within supplier network: TLS (version 1.2 or above)

IPsec or TLS VPN gateway

Availability and resilience

Guaranteed availability: As this SS&C Blue Prism Enterprise solution is on premise and installed into the customer's private cloud, then please refer to the cloud providers availability metrics.
Approach to resilience: The SS&C Blue Prism Enterprise solution is designed, architected, delivered and managed as Enterprise class applications. Further
information on exactly how this is achieved is available from Blue Prism on request.
Outage reporting: SS&C Blue Prism provides a service status page as well as proactive service notifications via email to nominated customer contacts. SS&C Blue Prism solutions provide various web based UI's to allow appropriately permissioned users to monitor, alert and resolve service outages as they occur. SS&C Blue Prism Automations themselves can be configured to provide any technical or business notifications during operation, via any channel (email, web page, API call, pdf report, etc) to allow bespoke service outage, issue or exception reporting during processing.

Identity and authentication

User authentication needed: Yes
User authentication: 2-factor authentication

Public key authentication (including by TLS client certificate)

Limited access network (for example PSN)

Dedicated link (for example VPN)

Username or password

Other
Other user authentication: Other forms of authentication utilised by Blue Prism includes secure key card applications used extensively by the NHS, DoD, etc.
Access restrictions in management interfaces and support channels: SS&C Blue Prism provides detailed software security features that
enable a secure environment and methodology. These mechanisms
result in the only Enterprise RPA platform that can withstand increasing
regulatory compliance and non-repudiation requirements. • Centrally
managed user access control, limiting access to named individuals only
• Role based access according to the principle of least privilege • Multi-Factor security, such that no individual can make changes without
secondary approval • A complete retrospective audit/changelog of all
activity • Segregation of environments with separate controls governing
each • Infrastructural security.
Access restriction testing frequency: At least every 6 months
Management access authentication: 2-factor authentication

Public key authentication (including by TLS client certificate)

Dedicated link (for example VPN)

Username or password

Audit information for users

Access to user activity audit information: Users have access to real-time audit information
How long user audit data is stored for: User-defined
Access to supplier activity audit information: No audit information available
How long system logs are stored for: User-defined

Standards and certifications

ISO/IEC 27001 certification: Yes
Who accredited the ISO/IEC 27001: BSI
ISO/IEC 27001 accreditation date: 12/07/2021
What the ISO/IEC 27001 doesn’t cover: N/A
ISO 28000:2007 certification: No
CSA STAR certification: No
PCI certification: No
Cyber essentials: No
Cyber essentials plus: No
Other security certifications: Yes
Any other security certifications: SOC2 (Type II)

Security governance

Named board-level person responsible for service security: Yes
Security governance certified: Yes
Security governance standards: ISO/IEC 27001
Information security policies and processes: In compliance with its ISO27001 SOC2 (Type II) obligations, SS&C Blue Prism conducts annual risk assessments and maintains disaster recovery/COOP plans to ensure continued functionality in the event of an emergency. Compliance is tracked a number of ways; Human Resources tracks employee compliance with required training, IT tracks employee compliance with hardware and software policies, and independent third-party audits are conducted annually to ensure compliance with ISO27001.

Operational security

Configuration and change management standard: Supplier-defined controls
Configuration and change management approach: SS&C Blue Prism offers an integrated Release Manager which applies
structure, governance, and control to the Change and Release
Management processes. Release Manager controls the promotion of
automations between environments as well as ensuring that this
process is only carried out by authorised users, with all actions fully
audited. Every time a package is created or edited, this is recorded in
the audit trail. Customers with particularly strict information assurance
requirements may have different Release Managers for each
environment so that, for example, one user can create and export a
Release from the Development environment.
Vulnerability management type: Supplier-defined controls
Vulnerability management approach: We carry out full quality control on each release and release notes accompany each release. As the solution is installed locally within the Customer's cloud environment, SS&C Blue Prism does not have any visibility over potential threats to that private instance.
Protective monitoring type: Undisclosed
Protective monitoring approach: SS&C Blue Prism operates a comprehensive protective monitoring
process across its services and internal operations. In the interests of
security, further details on these practices are available on request. To
date, all threats are identified and mitigated in our operations before
they become an issue.
Incident management type: Supplier-defined controls
Incident management approach: Under Blue Prism's ISO/IEC 27001:2013 compliant ISMS, every single
security Incident is logged, tracked, managed, and resolved under a
documented process. Blue Prism operates a no-blame policy ensuring
that all issues are immediately reported and the Incident Management
process is initiated at point of reporting. Blue Prism has a
comprehensive IS strategy and documented policies across a number
of areas such as employee vetting, etc. Security and Vulnerability
Assessments are carried out periodically which validate the
appropriateness of controls which are in place and these include input
validation and sanitisation; authentication and access control; audit; and
management of sensitive information.

Secure development

Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

Connection to public sector networks: Yes
Connected networks: Public Services Network (PSN)

Police National Network (PNN)

NHS Network (N3)

Scottish Wide Area Network (SWAN)

Health and Social Care Network (HSCN)

Social Value

Fighting climate change
Covid-19 recovery
Tackling economic inequality
Equal opportunity
Wellbeing

Fighting climate change

As part of the Robiquity value 'Show we care', we are dedicated to reducing unnecessary waste, organisational carbon footprint and using renewable energy sources where and when available. We have an environmental policy committing to assess and regularly re-assess the environmental effects of the Organisations activities.

Covid-19 recovery

Robiquity is committed to supporting organisations and businesses to manage and recover from the impacts of COVID-19, including where new ways of working are needed to deliver services.

Tackling economic inequality

Robiquity provide training opportunities for individuals impacted by current economy inequality, enabling future careers in the intelligent automation industry.

Equal opportunity

Robiquity has a long running diversity and inclusion programme, with D&I training rolled out across the business. We have an equal opportunity and diversity policy to ensure all members of our workforce are supported and included.

Wellbeing

Robiquity encourage wellbeing and mindfulness to all members of staff. Vitality is offered to all members of the workforce, and there is a wellbeing policy to encourage health and mindfulness.

Pricing

Price: £5,520 to £11,592 a licence a year
Discount for educational organisations: Yes
Free trial available: Yes
Description of free trial: 30 Day trial of Blue Prism automation capability available via registration on SS&C Blue Prism website.
Link to free trial: https://www.blueprism.com/free-trial/

SS&C Blue Prism Enterprise Robotic Process Automation (RPA) & Intelligent Automation (IA) platform

Features

Benefits

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Public sector networks

Pricing

Service documents

Cookies on Digital Marketplace

SS&C Blue Prism Enterprise Robotic Process Automation (RPA) & Intelligent Automation (IA) platform

Features

Benefits

Pricing

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Public sector networks

Social Value

Pricing

Service documents