Magentus Software Limited

Data Management Services (DMS)/SQLSuite

SQLSuite is a fully automated solution for harnessing health data. Providing data management services supporting business intelligence, risk stratification, medicines optimisation and clinical research, along with GP data extraction services.

Features

• Fully identifiable, pseudonymised or anonymised datasets can be created.
• Flexible output locations.
• Strong, approved consent model and process.
• Flexible managed scheduling capabilities.
• Multi-project participation.
• Fully managed automated extraction service.
• Secure encrypted data transfer.
• Automated update mechanism.
• Cross principal GP system normalised outputs.
• Compatible with all clinical coding systems.

Benefits

• Single source for data requirements regardless of GP Practice system
• Normalised/Standardised data format regardless of the originating GP system.
• Proven track record delivering local, regional, national studies/projects.
• Managed implementation from scoping to go-live.
• Fully managed service, guiding/advising on best methods and processes.
• Assist customers with data specification.
• Assist Customers with IG and Consent Models.
• Remotely monitored support service.
• GPSOC IM1 bulk interface accredited against all prinicpal systems.

£28,005.00 to £1,384,515.00 a unit

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at uk-sales@magentus.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

894775991410973

Contact

Paula Hadley
07512 303299
uk-sales@magentus.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Hybrid cloud
• Service constraints: Primary Supplier data is provided via NHS Digitals ‘IM1 Bulk interface’ and can be up to 48 hours old, so should not be used for direct patient care.
• System requirements:
  • .NET Framework 4.7+
  • HTTPS access to Magnetus webservices

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: In line with SLA outlined with the customer
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: No
• Support levels: Technical team provide full customer support who also liaise with our 3rd Line Support with advanced technical skills where required. Service Lead manages 2 Delivery Leads who oversee the technical team.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: User documentation us provided. However, 3rd Line support can also assist remotely if required.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Not Applicable.
• End-of-contract process: All query schedules are disabled.; Primary supplier data is disposed of and feeds stopped, if there are no other projects reliant upon it.; Data is deleted when project ends.

Using the service

• Web browser interface: No
• Application to install: Yes
• Compatible operating systems: Windows
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Windows desktop application, allowing GP practice users with reporting options.
• Accessibility standards: None or don’t know
• Description of accessibility: Run predefined reports.
• Accessibility testing: Not Applicable.
• API: No
• Customisation available: Yes
• Description of customisation: Queries are developed based on customer specifications.

Scaling

• Independence of resources: Scheduling of reports are monitored by Service team and distributed accordingly.

Analytics

• Service usage metrics: Yes
• Metrics types: Customer variance reports.
• Reporting types: Regular reports

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
• Protecting data at rest: Physical access control, complying with another standard
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: There is no user export function.; Outputs generated from SQLSuite are sent directly to customer defined end points.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: SLA is outlined in commercial discussions and any breach of SLA is immediately reviewed with the technical teams and if a 3rd party has incurred the SLA breach.
• Approach to resilience: AWS provides Single instance uptime percentage of at least 99.5%.
• Outage reporting: Email alerts - Service outages are provided via our Service team.

Identity and authentication

• User authentication needed: Yes
• User authentication: Limited access network (for example PSN)
• Access restrictions in management interfaces and support channels: Operational support access is based on principle of minimal privilege.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Limited access network (for example PSN)
  • Username or password

Audit information for users

• Access to user activity audit information: No audit information available
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: BSI
• ISO/IEC 27001 accreditation date: 22/11/2021
• What the ISO/IEC 27001 doesn’t cover: Not Applicable. Magentus supports the development, maintenance and sales of Primary Care Software and Services, installation and customer support (onsite and remote) and this is all covered in our ISO 27001 certification.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: Yes
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: No
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Policies are reviewed / updated regularly. Internal and external audits are performed on a scheduled basis. CyberSecurity training on a monthly basis. All new staff undertake IG/ IS training.

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: ISO 27001 A12 - Change Management Policy
• Vulnerability management type: Undisclosed
• Vulnerability management approach: Tenable scheduled. Patches applied within 3 days.
• Protective monitoring type: Undisclosed
• Protective monitoring approach: DMS 3rd line Support identify risks and are logged / escalated appropriately.
• Incident management type: Supplier-defined controls
• Incident management approach: ISO 27001 A16 - Incident Management Process.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: Yes
• Connected networks:
  • NHS Network (N3)
  • Health and Social Care Network (HSCN)

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Tackling economic inequality
  • Wellbeing

  Fighting climate change

  Magentus is already measuring its Full Scope emissions and discloses these via the CDP platform and through the Health Family Supplier Portal Evergreen Assessment. ; Since 2021, Magentus Group has undergone annual externally-managed carbon assessments and has put in place carbon-reduction initiatives such as increased Greenpower acquisition and waste recycling. Each year Magentus Group offsets its residual Scope 1, 2, and 3 emissions using validated projects that align with the UN Sustainability Goals. Magentus EMEA has a net zero by 2050 commitment, and has formulated a carbon reduction plan (CRP) which includes specific, measurable, and reportable targets that can be reported to relevant stakeholders in the Framework and in the broader NHS community.

  Tackling economic inequality

  Magentus celebrates the unique contribution of every colleague regardless of their racial origin or nationality. As a global business we recruit people from a diverse range of backgrounds to ensure we have talented people capable of delivering exceptional products that help to deliver better health outcomes for all. We recognise this is a good foundation, but we need to do more.; We will take the following actions to deliver against this target: ; · Signing the BITC Race at Work Charter to demonstrate our commitment to delivering this objective.; · Ensuring our recruitment partners actively source and promote candidates for our leadership roles from Ethnic Minority Backgrounds.; · Ensuring our recruitment adverts are visible on sites that target ethnic minority candidates such as ethnicjobsite.co.uk which is an accredited Crown Commercial Service (CCS) supplier on the G-cloud network.; · Ensuring all candidates understand our zero-tolerance stance for any form of discrimination so they know they will experience a positive and welcoming working culture.; · Appointing an Executive Mentor for each Ethnic Minority Leader to support their career development within our organisation.; · Training all our Management Team about unconscious bias and ensuring they are aware of our commitment to increasing the number of leaders on the contract who are from an Ethnic Minority Background by 20%.; · Offering a full range of flexible working options to ensure that employees are able to observe any religious/cultural commitments during their working hours.; · Offering a public holiday swap programme that enables Ethnic Minority Employees to spend time with their loved ones in line with their specific race/religion/cultural backgrounds such as working Christmas Day and having Eid off instead.

  Wellbeing

  Magentus believes exceptional customer service result from dedicated, well-trained, and healthy people. As such we place the highest emphasis on health and wellbeing and have created a working environment free of stigma where speaking about mental health is as normal as speaking about having a headache. ; Our Chief People Officer is responsible for delivering this commitment.; KPI; The number of days of absence attributable to mental health conditions such as anxiety/stress/depression will be less than 20% of our total monthly absence.; Our investment in promoting positive mental health equates to around £6,000 per annum.; Action Plan; We will:; · Ensure that all new employees hired to deliver the contract will have a nominated buddy to support them from their first day of employment, signposting them to our various mental health support networks including our dedicated Mental Health First Aiders, and helping to remove any feelings of isolation they may have when working on customer sites and away from home for protracted periods. ; · Continually promote activities that draw attention to mental health and wellbeing through our dedicated Health and Wellbeing Team Magentus Social. ; · Regularly advertise and support awareness days such as “R U OK day” in Australia and “Mental Health Week” in the UK.; · Offer all employees on the contract 2 days per year of paid volunteer time in recognition that volunteering is not only good for the community but also for positive mental health. ; · Offer all employees on the contract the opportunity to book regular informal ‘coffee chats’ to build team engagement and positive mental health.; · Ensure all people employed on the contract are reminded monthly about our support networks including Mental Health First Aiders and EAP.

Pricing

• Price: £28,005.00 to £1,384,515.00 a unit
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at uk-sales@magentus.com. Tell them what format you need. It will help if you say what assistive technology you use.