Hive

Employee Voice by Hive

Hive is an employee voice platform and partnership. Our employee / staff engagement surveys, confidential employee feedback tools and expert people scientists help organisations amplify employee voice, improve staff engagement, gather insightful employee feedback, create a better employee experience and improve organisational performance.

Features

• Confidential, flexible, automated and real-time employee voice platform
• Powerful reporting: sentiment analysis, heatmaps, benchmarking & eNPS
• Expert, strategic and fully tailored People Science support
• Flexible staff surveying: ask what you want, when you want
• Key driver analysis and action planning to make impactful change
• Hive Fives: peer-to-peer recognition to drive culture and values
• Hive Open Door: always-on channel for employees to speak up
• Hive Messenger: respond to feedback through identity-protected virtual chats
• SMS text participation, language translation, data export and more
• Dedicated Customer Success and Support teams based in the UK

Benefits

• Measure, understand and improve employee engagement on an ongoing basis
• Ask your people the right questions, at the right times
• Get actionable insights in real-time—less admin, more impact
• Equip managers with timely insights to drive agile decision-making
• Empower employees with a permanent, confidential voice
• Drive culture and values through ongoing peer-to-peer recognition
• Respond to confidential employee feedback directly and quickly
• Continually engage your workforce in organisational change
• Increase response rates with easily accessible and confidential online surveys
• Build a culture of listening, inclusivity and engagement

£9,000 a licence a year

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at hello@hive.hr. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

961884515762789

Contact

Donna Petrie
0333 305 8471
hello@hive.hr

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: The user must have hardware capable of running the latest browser versions, as detailed in our system requirements.
• System requirements:
  • Chrome (latest)
  • Firefox (latest)
  • Safari 9+
  • Edge (latest)

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: 6 hour case assignment SLA for priority 3 (general query) and 2 (partial system outage) cases and 2 hour SLA on priority 1 cases (full system outage). 48 working hour resolution for priority 2 and 3 cases and 4 hour for priority 1
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: No
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Access to product documentation and Hive support team is provided to all contracted customers as standard. The Product support team are there to answer technical queries about the platform, Monday - Friday between the hours of 9am - 5pm. They can be contacted through the help centre, support email address or support telephone number. This includes unlimited number of cases raised to the support team, in-accordance with Hive’s service level agreement.; ; Contracted customers are also assigned a dedicated Customer Success Manager, whose purpose is to be the direct line of contact for tactical advice, product enquiries and adoption of Hive. Customer Success support is delivered via email, phone and face-to-face meetings when required.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: All of our customers are assigned to a dedicated member of the Customer Success Team who will assist with the onboarding process.; ; Hive provide all the resources and templates needed to get started, as well as in-depth training sessions to ensure a smooth transition onto the platform. Post-launch, our customers receive ongoing tactical guidance, support and advice from their Customer Success Manager.; ; Our People Science team deliver strategic support in the form of training, coaching and facilitation, built around the requirements of our customers and the needs of their key stakeholders.; ; Their time is focussed on supporting our customers to introduce a new approach to employee engagement in a measured and impactful way, with considerable attention directed towards creating organisational readiness for Hive, creating confidence and momentum in driving change, and reinforcing the approach and making it stick.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Hive will provide a full data export for the customer, if requested, at the end of the contract. This document will be password protected and transferred in a secure manner.
• End-of-contract process: Typical subscriptions commence with an initial 24 month term and will renew at the end of the initial contract term.; ; Typical subscriptions include unlimited use of the Hive platform, tailored & on-site People Science support and ongoing tactical support from our Customer Success team.; ; Pricing is based on number of users, along with the level of support we would expect your organisation to require.; ; Additional costs include further investment into People Science support (beyond what's included in your subscription), expenses (travel, accommodation and sustenance costs), SMS text survey prompts and further language translation.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Employee facing pages are designed to work on any device, mobile or desktop, and we also support SMS text survey prompts (along with email).; ; However, the full application as used by managers/administrators is not intended for small screen devices such as mobiles at this time.
• Service interface: No
• User support accessibility: WCAG 2.1 AA or EN 301 549
• API: Yes
• What users can and can't do using the API: ISO 27001:2022 Annex A control 8.26 Application security requirements. ; ; By integrating your HRIS into Hive, your user data will always be accurate and up to date—without you having to lift a finger. ; ; Once integrated, any changes you make in your HRIS will be automatically replicated in our platform. So you can rest assured that everyone will receive the right invitations to have their say—allowing you to fully embrace continuous listening and Hive’s real-time feedback channels.; ; Once you’ve integrated, you’ll never have to manually amend your user data. So one less thing on your pre-survey to-do list, and one less system to update when something changes. ; ; Using the workforce demographics from your HRIS, Hive will segment employee feedback to help you spot trends—giving you even more insight to answer the all-important “why?”.; ; We’ve got integrations set up for a number of HRIS, so all you need to do is let us know which system you use, and we can get them linked up. And if your HRIS isn’t one of those on our current list, then you can request it to be next!
• API documentation: No
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: The Hive platform will give you complete freedom to ask what you want, when you want, with no limitations or restrictions.; ; Hive support all of our customers with developing a fully customised question strategy that's tailored with the needs of your people, leaders and organisation in mind.; ; You can customise the categories of our recognition feature to align it with your organisational values and the categories of our Open Door feature so that you can position it in the best way possible for your organisation.; ; Email templates are also customisable on a per customer basis.

Scaling

• Independence of resources: ISO 27001:2022 Annex A controls 5.23 Information security for use of cloud services and 8.6 Capacity management. Hive's infrastructure is based on a micro-service model allowing us to seamlessly & instantaneously scale with the demands of our users. Demands on the application by users do not affect the service of other users due to the auto-scaling setup provided by our hosting provider AWS.

Analytics

• Service usage metrics: Yes
• Metrics types: Real-time reporting dashboards will display Engagement Index, eNPS, response rates, average scores, benchmarking and other descriptive data about ongoing surveys.
• Reporting types: Real-time dashboards

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Hive administrators can export their data (survey responses, recognitions, suggestions and users) in a comma-separated value (CSV) format that can be imported into all commonly used spreadsheet software.; We are also able to provide data in a format suitable for consumption by Business Intelligence software.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: ISO 27001:2022 Annex A controls 8.6 Capacity management and 8.14 Redundancy of information processing facilities. Our standard Service Level Agreement (SLA) document is shared with all of our Customers. We endeavour to deliver maximum uptime for our users, both internal and external, via various AWS mechanisms such as auto-scaling, health checks and alerting.
• Approach to resilience: Confidential.
• Outage reporting: ISO 27001:2022 Annex A controls 8.15 Logging and 8.16 Monitoring activities. The system has a realtime public status page that outlines and monitors any outages or planned maintenance, available here: https://status.hive.hr/; ; Email alerts are available via the above public status page.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Username or password
• Access restrictions in management interfaces and support channels: ISO 27001:2022 Annex A controls 5.15 Access control 5.16 Identity management 5.18 Access rights 8.2 Privileged access rights and 8.3 Information access restriction. We implement a Role Based Access Control (RBAC) model within the application with least privilege principles, which allows organisations to control what information users have access to in a controlled, auditable and granular manner.; ; We also restrict access for support personnel to the absolute minimum amount of data required to carry our their customer support role.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users receive audit information on a regular basis
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: British Assessment Bureau
• ISO/IEC 27001 accreditation date: 05/02/2018
• What the ISO/IEC 27001 doesn’t cover: There are no Annex A controls excluded
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: Cyber Essentials; Cyber Essentials Plus
• Information security policies and processes: ISO 27001:2022 Annex A controls 5.1 Policies for information security 5.4 Management responsibilities 5.37 Documented operating procedures and 6.3 Information security awareness, education & training. As part of our ISO27001 certification there are a range of policies supporting our ISMS Information Security Management System. These policies include but are not limited to Acceptable Use, Access Control, Backup, Business Continuity, Risk, Clear desk-clear screen, Cryptographic Controls, Data Management, Mobile Device Management, Network & Firewall Configuration, Password Management, Information Security, Secure Development and Information Classification & Handling.; All policies are have 'owners' and are subject to periodic review as a minimum this is annually. Policy implementation & compliance is subject to periodic internal audit and consistent support from top management and same from the 'Awareness & Alignment' group of senior managers. Also, the company is subject to annual external audit to satisfy ISO 27001:2022 Annex A control 5.35 Independent review of information security. The Information Security & Compliance Manager reports to top management.

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: ISO 27001:2022 Annex A controls 8.9 Configuration management and 8.32 Change management. The company has defined & implemented processes and tools to enforce defined configurations for operational systems over their lifetime. Major changes to systems follow agreed rules and a formal process of documentation, specification, testing, quality control and managed implementation. Roles-responsibilities & procedures are implemented to ensure satisfactory control of all changes. Change control procedures are documented to ensure the confidentiality, integrity and availability CIA of information for the entire system development life cycle from the early design stages through all subsequent maintenance efforts.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: ISO 27001:2022 Annex A controls 5.7 Threat intelligence 8.7 Protection from malware and 8.8 Management of technical vulnerabilities. We maintain a Risk Register with all identified potential threats and vulnerabilities. When a threats are over a certain threshold they must be treated within a specified time frame. Any high-risk threats are patched as soon as possible on production systems in accordance with our Risk Register time frames. We gain awareness of potential threats via Privacy Impact Assessments on all third-party services in use, as well as through annual penetration tests and regular vulnerability scans.
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: ISO 27001:2022 Annex A controls 5.7 Threat intelligence 5.25 Assessment & decision on information security events 8.15 Logging and 8.16 Monitoring activities. All production systems run TrendMicro Deep Security, which informs us and attempts to prevent any active intrusion occurring within the systems. If potential compromises within the systems become apparent, we have a documented incident management process which details the precise severity and steps to be taken. Depending on the incident severity we have different SLAs supported by a Business Impact Analysis of people, premises & systems.
• Incident management type: Supplier-defined controls
• Incident management approach: ISO 27001:2022 Annex A controls 5.24 5.25 5.26 5.27 5.28 5.29 and 5.30. We have pre-defined processes for common events.; Users can report incidents to the support team, the support team then assess the issue to see what it should be categorised as and to assign it a priority. The relevant members of the incident response will then work together to assess and contain the issue, investigate and resolve it. Incident reports are filed, and once the issue has been resolved they will undergo post-incident review & learning. Serious incidents will be raised at the next management review.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Hive sustainability objectives:; ; 1. SECR ‘streamlined energy & carbon reporting reporting’ of our supply chain commitment to sustainability OR other suitable reporting measures such as ESG (environmental, social & governance) or CSR (corporate social responsibility).; Measure: A positive assessment of emissions, energy consumption & energy efficiency of those suppliers required to have a continual commitment to sustainability.; ; 2. Sustainable operations of HiveHQ premises using reuse, reduce & recycle principles.; Measure: A positive workplace culture encouraging & evidencing the company commitment to reuse, reduce & recycling at HiveHQ premises.; ; 3. Consumption of energy & consumables at HiveHQ premises.; Measure: Usage & spend analysis of energy usage and consumables needed to sustain effective operations & a compliant working environment at HiveHQ premises.

  Covid-19 recovery

  Hive HR supports organisations with data and insights that enable them to make data driven decisions to support their employees and adapt to the demands of the future of work.; ; Hive's Open Door feature has been particularly valuable to businesses who moved from office based to remote and hybrid models who still wanted to collect feedback without surveys.; ; Dedicated survey questions for adapting to hybrid working and the future of the workplace are available for all Hive customers.

  Equal opportunity

  Hive's diversity, equity and inclusion question bank is frequently used by customers to ensure their organisations are providing the most equitable and inclusive environments for their employees.; ; The confidential nature of the feedback submitted via Hive's platforms enables all viewpoints to be considered without discrimination or bias.

  Wellbeing

  Hive HR provides analytics and insights to help organisations improve the mental, physical and financial wellbeing of their employees. These insights can help workers and managers better manage stress and burnout to improve business performance and employee satisfaction.; ; Hive can provide a range of people science-approved questions for organisations to use in their surveys to help understand and measure the wellbeing of their workforce. The response can then be analysed and actions produced to tackle the challenges and make improvements.

Pricing

• Price: £9,000 a licence a year
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: We’re able to support targeted and low-cost pilots to help introduce Hive in a strategic way within your organisation
• Link to free trial: https://www.hive.hr/book-a-demo/

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at hello@hive.hr. Tell them what format you need. It will help if you say what assistive technology you use.