EHS Data Ltd

MonitorPro

The MonitorPro Environmental Database Management System provides your organisation's users the ability to manage, report and leverage its environmental data. Keeping your organisation compliant and on top of its environmental obligations.

Features

• Scheduling - Ability to schedule your monitoring data
• Automation - Automation of various tasks to streamline your processes
• Alerts - Notification of breaches of compliance limits
• Data visualisation - Graphing and data analysis
• Mapping - Mapping functionality to geographically view data
• Calculator - Calculate your data automatically
• Field Entry - Field data directly into your smart device
• MCERTS
• Integration - Integration with other systems for data import
• Dashboard - Dashboard functionality for quick data access

Benefits

• Reduce compliance risk - automated validation and alerts
• Data quality checked and secure, auditable
• All data in one place, with a single consistent interface
• Save time and resources by automation of planning, importing
• and checking, interpretation and reporting
• Quality Assurance to the MCERTS standard
• User friendly - Simple UI
• Scalable - Can grow
• Flexible - Variety of uses
• Established product

£660 to £2,640 a licence a year

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at matt.silk@ehsdata.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

795966681426614

Contact

Matthew Silk
0845 388 2458
matt.silk@ehsdata.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: None
• System requirements: Browser based, Edge, Chrome, Safari, Firefox

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: 24-hour response - 9am-5pm Monday to Friday excluding UK Bank Holidays
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Web chat
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: Via our website
• Web chat accessibility testing: None
• Onsite support: Yes, at extra cost
• Support levels: Basic - Access to telephone and email support for the application. Access to the latest MonitoPro version. Cost is included in the SaaS fee.; Essential - As Basic but includes a dedicated account manager, up to 4 hours of system administration and 1 hour of Web-based training per month. Cost £3400 per year; Premium - As Basic but includes a dedicated account manager, up to 8 hours of system administration and 2hr Web-based training per month. Cost £6800 per year
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: EHS Data offers a full implementation service which includes items such as legacy data transfer, configuration, workflow setup and training.
• Service documentation: Yes
• Documentation formats: HTML
• End-of-contract data extraction: Either with a copy of the database or exports of the data in Excel.
• End-of-contract process: Clients will be provided with a copy of their database or an extract of the data.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: MP-Web is responsive to work on mobile devices down to a tablet. MP-Field is specifically designed to work with mobile phones and tablets.
• Service interface: No
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: MonitorPro has an Import API used to connect to 3rd parties to pull data which is exposed via their endpoints (weather stations, loggers etc). MonitorPro also has an Output API which can be used by clients to pull data for onward integration (business reporting, ERPs, etc).
• API documentation: Yes
• API documentation formats: HTML
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: MonitorPro is hugely flexible and can be configured in a range of ways, to meet the needs of a range of industries and business workflow. There is limited need to customise the application, however this can be provided via items such as custom import routines or custom reporting templates.

Scaling

• Independence of resources: Clients can opt for shared or dedicated hosting. In dedicated hosting arrangements, hardware is distinct for that client. Resource use is continually monitored and adapted as needed.

Analytics

• Service usage metrics: Yes
• Metrics types: EHS Data provides quarterly reports which detail certain service metrics such as database size, fragmentation and errors recorded. Users can also present similar data on a live Dashboard.
• Reporting types:
  • Real-time dashboards
  • Regular reports

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Data sanitisation type: Explicit overwriting of storage before reallocation
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: MonitorPro offers numerous layouts for export into Excel. It also supports reporting which can be exported to Excel, Word and PDF.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: Current service uptimes are 99.9% and highly available. There are no refunds/credits built into the SLA.
• Approach to resilience: EHS Data and our server providers adhere to ISO27001 and have documented processes around all aspects of IT and data security.
• Outage reporting: Email

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Public key authentication (including by TLS client certificate)
  • Username or password
• Access restrictions in management interfaces and support channels: Access is only provided to key users required to support the client's application using named user accounts.
• Access restriction testing frequency: At least once a year
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: Between 6 months and 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Approachable Certification
• ISO/IEC 27001 accreditation date: 14/03/2023
• What the ISO/IEC 27001 doesn’t cover: The accreditation covers provision of hosting environmental database management systems
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: ISO 27001

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: A fully documented process for all relevant changes to the system is followed.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: EHS Data has a fully documented approach to vulnerability management.
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: EHS Data has a documented approach to protective monitoring.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: EHS Data has a documented approach to incident management inline with ISO 27001

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  Fighting climate change

  Fighting climate change

  EHS Data is a carbon negative business, using solar, and offsetting.

Pricing

• Price: £660 to £2,640 a licence a year
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at matt.silk@ehsdata.com. Tell them what format you need. It will help if you say what assistive technology you use.