GLOBAL VIEW SYSTEMS LIMITED

CareScan Point-of-Care and Inventory Management Software

CareScan is an intuitive modular system that tracks implants, devices and consumables at Point of Care to improve safety, reduce ‘Never Events’ and support accurate procedure costing. Also providing inventory management with stock checks, expiry monitoring and real‑time visibility, ensuring resources are available, traceable and efficiently managed across clinical services.

Features

• Real‑time decision‑support alerts for safer clinical workflows
• GS1 and HIBC‑compliant barcode scanning across all products
• Patient‑level PLICS data capture for finance accuracy
• Never Events reduced - automated expiry, recall, laterality, safety‑notice checks
• Real time National Joint Registry Check
• Track high‑value asset and consumable usage
• Full inventory management with stock levels and product expiry monitoring
• Proactive expiry notifications reduce waste and stock held
• Dashboards and reporting for operational and clinical traceability
• Digital Checklists (NatSSIPs/LocSSIPs) - reduced admin/paper

Benefits

• Simple and intuitive system developed by, and for the NHS
• Accurate patient‑level costing for financial transparency
• Improved theatre and procedure utilisation
• Supports complete data capture across patient pathways
• Optimised stock levels and reduced wastage and shortages
• Provides auditable data for investigations and regulatory submissions (MDOR)
• Enhances clinical coding accuracy with structured data
• Reliable data to support benchmarking and evidence trend improvements
• Integrates with clinical systems for seamless interoperability
• Supplies clear audit trails for recalls and revision procedures

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at contact@globalviewsystems.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

863663761248494

Contact

Richard Iveson
01482772536
contact@globalviewsystems.co.uk

About your service

• Service categories:

  Applications

  Production and operations

  Service industry and public sector operations

  • Healthcare
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
• Service constraints: Any planned maintenance of the cloud service, will be communicated to the customer. This adheres to the support contract agreed upon the sale. Clear communication of ownership and accountability is crucial in our approach. We prioritise transparent communication regarding planned downtime, ensuring that all key stakeholders are promptly informed and that agreements are in place. This proactive communication strategy helps minimise disruptions and ensures that stakeholders are well-prepared for any operational adjustments. Regular health checks and reviews serve as a structured platform for ongoing communication. This process allows us to optimise the system continually, addressing any emerging concerns or opportunities.
• System requirements:
  • The Ability to Access Public Cloud
  • Mobile Devices - With Barcode Reading Technology
  • IPSEC Tunnel for Private Cloud
  • Active Directory (Open ID Compliant)

User support

• Email or online ticketing support: Yes
• Support response times: Based in the UK our support program enables us to provide efficient and quick support and mitigate risk by maintaining the optimum performance of your solution with ease.; Fully ticketed and trackable enabling you to log, query, discuss and resolve any operational issue that you may experience during the use of the software solution.; 9am to 5pm Monday to Friday, excluding Bank Holidays. Acknowledgement of receipt:; Minor Errors: 4 hours. System Defect with Workaround: 60 minutes. Business Critical Failures: 60 Minutes.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Standard support includes email and phone support 9am to 5pm, Monday to Friday. With all enquiries logged and tracked via a Zendesk ticketing system. Scoring 100 out of 100 in our most recent customer survey, the provision of support services is via a Help Desk on a remote off-site basis. The provision of onsite Support Services is available; chargeable per day, plus reasonable travel expenses. We also conduct regular health checks and reviews to optimise your system. Plus, assign a dedicated Customer Success Manager to ensure full value and a true partnership experience.24/7 Support available by agreement, this will incur an additional charge.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: A dedicated Project Manager is appointed to liaise with the customer, hold a pre‑contract meeting, and agree timescales, tasks, and responsibilities. Once installed, the Project Manager supports the Trust in populating and configuring the system to local requirements.; We provide a range of role‑based training structured around stakeholder groups, using a train‑the‑trainer approach. User guides, operational and reporting documentation ensure users have key information to hand. Additional assistance and training can be purchased (see pricing document).; After launch, a dedicated Customer Success Manager partners with you to set success metrics, run cadence reviews, and tailor ongoing support. For staged rollouts, we co‑manage a stage‑gate plan (pilot → expand → optimise) with training, communications, and data checks at each gate. We monitor adoption and performance, provide refresher training where needed, and adjust configuration to ensure full value realisation.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: All data can be exported to a csv file for reference in the future. We will liaise with the product lead to ensure they have the data and csv file when the contract ends.
• End-of-contract process: The contract includes access to the software for the agreed number of users. It also included support during the implementation, customer success reviews and technical support for the duration of the contract.; Once the notice to terminate or a formal decision is taken to not renew the support team will ensure all data is both accessible and delivered to the hospital product lead in CSV format.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Our onboarding and offboarding documentation is provided at go‑live in PDF format and this process is reviewed and agreed with the customer as part of the implementation process. All documents are produced using accessible formatting to ensure they can be used by the widest range of users.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Chrome
• Application to install: Yes
• Compatible operating systems:
  • Android
  • Linux or Unix
  • Windows
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Mobile app is designed with intuitive mobile friendly interface to ensure simplicity for the operational team . The desktop service is optimised for managerial and procedures with data dashboard availability and reporting tools optimised for large screens including large displays and desktop monitors.
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: All applications are browser based and are accessed through the common web browsers including but not exclusive to Google Chrome. Multiple types of roles can be limited to each user for the purpose of the software.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: We have carried out a structured programme of interface testing with users who rely on a range of assistive technologies to ensure our Software is accessible, intuitive and operable. This includes testing with screen readers to verify that all interactive elements are correctly labelled, follow a logical reading order, and provide clear focus indicators throughout workflows. We also tested compatibility with screen magnifiers, ensuring text and interface components scale cleanly without loss of function or clarity.
• API: No
• Customisation available: Yes
• Description of customisation: Working closely with the buyer and end-users it is possible to customise the following: - User Permissions, Tasks and Procedures, Products, Workflows, Locations, Staff Roles, Access levels, and sets of users.

Scaling

• Independence of resources: Regular load testing is carried out to validate system performance, stability, and capacity under high concurrent usage. These tests simulate peak operational demand to ensure the platform continues to respond quickly and reliably, even during extreme usage events. Message‑queue processing is also tested at scale to confirm that large volumes of tasks can be managed efficiently without delays or bottlenecks. This ensures tasks are distributed evenly, processed in order, and prioritised correctly. Together, these tests provide assurance that the system can handle real‑world surges in demand while maintaining consistent performance for all users.

Analytics

• Service usage metrics: Yes
• Metrics types: CareScan provides a comprehensive set of service metrics through a performance summary dashboard, offering clear visibility of activity levels, usage trends and operational performance. Users can compare performance against previous selected periods to identify improvements or variances. Exportable reports mirror the dashboard content and allow custom date‑range filtering for deeper analysis and audit purposes. The integrated Traceability Viewer enables rapid access to patient, product and procedural data, supporting investigations, recalls and revision planning. Together, these metrics give users accurate, real‑time insight into stock usage, product safety, compliance, and overall workflow efficiency across clinical and inventory processes.
• Reporting types:
  • Real-time dashboards
  • Regular reports
• Resource tagging: Yes
• FOCUS resource tagging: Yes

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest: Physical access control, complying with another standard
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type: Data Erasure

Data importing and exporting

• Data export approach: Users can export reports and information by csv files. If agreed, back ups of the SQL databases can be taken by IT teams.
• Data export formats:
  • CSV
  • Other
• Other data export formats: PDF
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: The level of availability is 99% per year and is controlled by the SLA support package to ensure swift fault resolution.
• Approach to resilience: Available on request.
• Outage reporting: If a system outage is reported by a customer, the issue is logged through our ticketed and controlled support system. Key predefined stakeholder groups are copied into all communications to ensure full transparency throughout the resolution process. The server is continuously monitored, and in the event of an outage an automated alert is generated and sent to the internal technical team to enable swift investigation and resolution.; When a new version or hotfix is available, our support team liaises with operational contacts and IT representatives to agree a suitable date and time for deployment. Communication messages are then distributed to ensure all users are aware of the planned maintenance.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: The use of user roles dictate what the logged in user can access. Their bearer token only allows certain endpoints to hit. The UI hides components not to be accessed.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: Between 1 month and 6 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: We operate an ISO 27001‑certified Information Security Management System (ISMS), which defines the policies, processes and controls governing how we protect information across our organisation. All information security policies are formally documented, risk‑based, reviewed at least annually, and approved by senior management. These policies cover access control, data protection, secure development, incident management, supplier management, backup and continuity, vulnerability management, and acceptable use.; Our reporting structure ensures strong governance and accountability. The Information Security Manager oversees day‑to‑day operation of the ISMS and reports regularly to senior leadership through management reviews and security steering meetings. This structure allows risks, incidents, audit findings and improvements to be monitored and escalated in a controlled manner. The Data Protection Officer is consulted on privacy‑related matters and supports GDPR compliance.; We ensure policies are followed through a combination of mandatory staff training, technical enforcement, and continuous monitoring. Staff must complete onboarding and annual refresher training, with non‑completion escalated. Role‑based access, encryption, MFA and endpoint controls ensure policies are technically enforced. Regular internal audits, external ISO surveillance audits, and management reviews verify policy compliance and drive continual improvement. This structured approach ensures information security remains embedded operationally across all teams and processes.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: We follow an ISO 27001‑certified Information Security Management System, which includes formal configuration and change management controls. All changes comply with an ITIL‑aligned process, including documented change requests, risk and impact assessment, approvals, peer review, testing, and defined deployment windows with rollback plans. Configuration items are version‑controlled, monitored for drift, and fully auditable. All updates are raised and tracked through a controlled ticketing system, ensuring full traceability. Continuous monitoring and post‑change reviews ensure that updates do not affect service performance, availability or security, and that operational stability is maintained throughout the change lifecycle.
• Vulnerability management type: Undisclosed
• Vulnerability management approach: GVS Software is tested using Snyk Vulnerability scanner across the full software solution. A pre-release announcement will be published preceding each release with Critical Patch Updates.; As a matter of policy, GVS will not provide additional information about the specifics of vulnerabilities beyond what is provided in the Critical Patch Update or Security Alert notification, the pre-installation notes, the readme files, and FAQs. GVS provides all customers with the same information in order to protect all customers equally. GVS does not develop or distribute active exploit code (or "proof of concept code") for vulnerabilities in our products.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Snyk Vulnerability scanner grades all threats based on the level of severity, this is monitored weekly and then built into the development schedule.
• Incident management type: Supplier-defined controls
• Incident management approach: Users who experience technical issues would consult the local IT department prior to contact GVS. The customer will have a support contract with GVS and GVS have a dedicated department to resolve any incidents, using a ticketing system to monitor support calls and emails. This follows a predefined SLA process and ensures clear communication and transparency with all stakeholder.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: A trial solution is offered as a reduced-feature evaluation service. This is arranged with the onsite team and deployed under Global View's guidance for an agreed length of time, requiring a designated customer project manager. The criteria for a successful trial are defined and agreed before commencing.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 5%
• Between £500,001 and £1,000,000: 5%
• Between £1,000,001 and £2,500,000: 10%
• Between £2,500,001 and £5,000,000: 10%
• Over £5,000,001: 10%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: SGS United Kingdom Ltd
• ISO/IEC 27001 accreditation date: Tuesday 25 March 2025
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 234ab352-263e-4013-bc2a-04b0604e4125
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 272f9e7c-d19c-4e46-a77b-e42873819882
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at contact@globalviewsystems.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.