Damibu Ltd

CATCH - Common Approach to Children's Health

CATCH is a health information service which supports CCGs and/ or LAs to easily customise and publish hyper-local health information. Designed for parents of young children, content is delivered through personalised notifications when it is most relevant, maximising the opportunity for engagement and behaviour change and reducing inappropriate service usage.

Features

• Hyper-local, language and cultural customisation of content
• Integration of existing local services
• Notification through mobile app
• Usage analytics reports
• Content management support
• Social media marketing
• Information Governance compliant, no personally identifiable data
• Monitoring and updating of content
• Content available offline

Benefits

• Libraries of validated information for parents
• Reduce workload by aggregating existing trusted information sources
• A unified information source for use across services
• Customise regional content to align with your campaigns
• Support from CATCH content managers included
• Increase reach of local services by linking them to content
• Increase parents confidence to deliver care at home
• Personalise content to reduce 'information overload' for parents
• Reduce reliance on paper materials
• Review anonymised analytics by postcode or LSOA

£10,000 to £40,000 a licence a year

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@damibu.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

882234748399290

Contact

David Burrows
+441513240090
info@damibu.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Hybrid cloud
• Service constraints: No constraints.
• System requirements:
  • Google Android or Apple iOS device
  • Internet connection required during setup (then available offline)

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Email responses within 24 hours on weekdays. Only Level 1 High Priority support available at weekends.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Web chat
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: The web chat is available through our company website. Starting a chat will start a conversation directly with one of our team. At the end of a chat you will be asked to provide feedback on the interaction to help us improve our support.
• Web chat accessibility testing: The web chat feature is provided by Salesmate and has been tested with different browsers.
• Onsite support: No
• Support levels: Elephone and email helpdesk 09.00 to 17.00 Monday to Friday.; ; Technical Support Priorities and Timescales; 1 (High) : Full system outage – no users at all can use the system. Response: 10 mins. Resolve 4 hours.; 2 (Medium) : Partial system outage – a significant number of users are affected. Response 10 mins. Resolve: 1 business day; 3 (Low) : Minor – a handful of users or a part of the system is not working to Specification. Response: 1 hour. Resolve 5 business days; 4 (Query) : Minimal impact. Response; 3 business days. Resolve 20 business days; ; Content Management; All content requires approval by the client, the following assumes that approval has been given...; 1 (High) : Incorrect Clinical Information. Response: 10 mins. Resolve 4 hours.; 2 (Medium) : Incorrect non-Clinical Information. Response 10 mins. Resolve: 1 business day; 3 (Low) : Additional Information. Response: 1 hour. Resolve 5 business days
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: For users of the CATCH app, no training or documentation is required. The app was designed to be intuitive, with all the information required to use the app available as part of it's design.; ; Training & support is available for buyers using the management portal.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: No user data is stored as part of the service, all content is available in the public domain.; ; Analytical data is shared with buyers regularly in open format (PDF) and can be exported at any time.
• End-of-contract process: Users of the app will be notified that their area is no longer being supported and asked to select their nearest supported region.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The mobile app is designed for end-users (parents or carers of children), the desktop service is a management dashboard and content management system that focuses on customising content and viewing analytical data.
• Service interface: No
• User support accessibility: WCAG 2.1 AA or EN 301 549
• API: Yes
• What users can and can't do using the API: The API allows developers to create tools to access content but require an API key. API functions: - Fetch available content for the API key - Fetch a content pool - Additional meta data related to that content - Scheduled synchronisation
• API documentation: Yes
• API documentation formats: PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: All information delivered using the Damibu Feeds platform which provides many features for content customised by customers. This includes removal of any of the default health articles; adding any locally required health articles and adding, linking national and local support groups to health articles, language translation or cultural customisation.

Scaling

• Independence of resources: The mobile app functions completely offline once setup is complete, reducing demand on servers for many users.; ; Amazon Web Services powers the platform using serverless technology and multiple layers of caching so that the platform can scale efficiently. If any users place a significant demand on the service additional resource will be allocated to ensure the service remains usable.

Analytics

• Service usage metrics: Yes
• Metrics types: Analytics are built in to many features of the app and can be accessed through the management dashboard.; ; User surveys are delivered through the app, responses are checked to ensure there is no risk to confidentiality and are shared with buyers to provide additional usage data.
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Staff screening not performed
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest: Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: No
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Data export is available upon request, it is not accessible by default to users.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Service Availability : 99.99% during work days, 99.9% for nights/weekends. Unplanned Outages : Refunded at a pro-rata percentage
• Approach to resilience: CATCH is powered by Amazon Web Services leveraging the cutting edge resiliency services such as intelligent caching, regular backups and scalable architecture to prevent down-time.
• Outage reporting: In the event of any outages, licence holders will be informed via email.

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: All staff are trained to maintain security practices when engaging with customers. Any sensitive activities will require users to confirm appropriate security through a validated email address or telephone number. Permissions are managed with appropriate user roles.
• Access restriction testing frequency: At least once a year
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: You control when users can access audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: You control when users can access audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications: NHS England Digital Security Protection Toolkit: Registration Number - ZA276533

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: Damibu complies with NHS England Digital Security Protection Toolkit: Registration Number - ZA276533
• Information security policies and processes: Any security issues reported to Damibu will be escalated to Damibu's SIRO and addressed inline with the Data Security & Protection Toolkit guidelines. The toolkit is reviewed and updated annually to ensure internal processes are aligned with toolkit recommendations.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: All tasks are tracked through a Jira project management system, before being thoroughly assessed for Data Security Protection compliance. Once the task is completed, its progress is tracked through a cloud-based version control system. A template table, according to Section 1.1 of DSPT (Information Asset Register and Record of Processing Activities) is used for monitoring changes.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Risk assessments to identify and mitigate issues are carried out to ensure compliance with DSP Section 7 (Continuity Planning). An annual review is conducted of all active accounts to ascertain whether access controls are being governed appropriately and access will be restricted if necessary to prevent vulnerabilities in data security (DSPT Section 4 - Managing Data Access).
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: As specified in the DSP documentation (Section 6 - Responding to Incidents), all incidents and near-misses which arise must be reported. This is done via the Incident Report Form sent to the Data Protection Officer (DPO) followed by a management meeting, from which appropriate action is taken. All staff have received training on how to find, fill out and submit the Form. Incidents must subsequently be submitted through the Incident Reporting Tool by the DPO.
• Incident management type: Supplier-defined controls
• Incident management approach: As specified in the Information Governance documentation, section 14.1 - 320 (Incident management and reporting), all incidents and near-misses which arise must be reported. This is done via the Incident Report Form sent to the IG lead, followed by a management meeting, from which appropriate action is taken. All staff have received training on how to find, fill out and submit the Form. Incidents must subsequently be submitted through the Incident Reporting Tool by the IG lead.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Equal opportunity
  • Wellbeing

  Equal opportunity

  The mission of Damibu is to improve the availability and accessibility of information for everyone. Existing methods for sharing information such as PDF documents, exclude portions of the population because these documents are created for desktop computers. The experience is poor for those who may only have access to a mobile device, and accessibility tools often don’t work with PDFs. CATCH offers an equal experience across all digital devices and works with accessibility tools such as screen readers, colour contrast modes and font size adaptation.

  Wellbeing

  CATCH supports parents to provide self-care at home for their children, it promotes awareness of common age based illnesses and symptoms so parents can be better prepared for common childhood illnesses.; ; The aim of CATCH is to reduce the feeling of 'information overload' faced by parents that will often lead them to look for information online and potentially become victim to misinformation about health issues.; ; CATCH helps support the health and wellbeing of both child and parent by taking a proactive approach to deliver information at the right time.

Pricing

• Price: £10,000 to £40,000 a licence a year
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@damibu.com. Tell them what format you need. It will help if you say what assistive technology you use.