RioMed Ltd

Cellma

RioMed's Cellma application is a cutting-edge health information system designed to provide dynamic and integrated digital solutions to effectively manage all aspects of healthcare and promote the transition to a truly ‘paperless’ infrastructure. The information captured helps improve the quality, efficiency and safety of patient data.

Features

• One patient one record
• Realtime Access
• Reporting
• Patient and User App
• Secure Chat functionality fully integrated
• Integration
• Interoperability
• Master Patient Index
• Remote access
• Paperless

Benefits

• Extensive reporting ability
• Accessible on any device
• Complete assessments
• Reduce administrative burden
• Document management solutions integrated within clinical application
• Interoperable with third-party systems
• Fully SNOMED coded
• Increased efficiency and patient safety
• Seamlessly integrated EPR
• Customised to your specific requirements

£15 a user a year

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at enquiry@riomed.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

972719525926751

Contact

Mario Mohammed
02380277044
enquiry@riomed.com

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud
• Service constraints: Any planned maintenance is scheduled to take place at 3am to reduce the impact on users.
• System requirements:
  • Database Server: 3.3 GHz , RAM 96 GB
  • Backup Database Server - optional
  • Reporting Server - optional
  • Document Management Server - optional
  • Testing Server
  • Application servers (up to 4 for load balancing)
  • Server Software eg Tomcat, Flash Player, MySQL, SQL etc.
  • Windows Operating System

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Support response times; ; 1. Priority Level (P)- Critical: Response Time: 15 mins. ; 2. P- Major: Response Time: 30 mins. ; 3. P- Serious: Response Time: 1 hour ; 4. P- Minor: Response Time: 24 hours ; 5. P- Other: Response Time: 24 hours
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Typically we provide 2nd or 3rd level support. Our sites have a named team member of our Customer Services Team. At extra cost, we can provide 1st level support and onsite support
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: The RioMed 10 Step Process has been designed to enable the successful implementation of Cellma from the time of contract through to set-up, design, customisation, training and Go Live. Before each step can be initiated the previous step must have been signed off by the appropriate personnel from both the customer and RioMed. We provide onsite and online training for users as applicable and user documentation. There is help available within the application and videos to assist.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Once a contract has terminated all data remains the property of the buyer. Our decommissioning process comes into action whereby data is returned to the buyer in a secure manner.
• End-of-contract process: At the end of a contract our Decommissioning process comes into action.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • MacOS
  • Windows
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Cellma has an Andriod and iOS application for users and patients. The user app is a lite version of the web browser version.
• Service interface: No
• User support accessibility: WCAG 2.1 A
• API: No
• Customisation available: Yes
• Description of customisation: Certain elements of Cellma can be customised as per the requirements from the buyer. The buyer can choose what modules they want as per the services they provide and they can hide some of the functionalities if they do not wish to use it.

Scaling

• Independence of resources: Our system has been tested with large numbers of concurrent users and the response times measured with no degradation in availability or responsiveness. We also deploy load balancing tools.

Analytics

• Service usage metrics: Yes
• Metrics types: Cellma has inbuilt tools to analyse service metrics and audit functions.
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: In-house
• Protecting data at rest: Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: No
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Data can be exported in some elements of the application using excel, csv, html, pdf and word format. Data can also be exported directly from the database as required.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • Excel
  • PDF
  • HTML
  • Word
  • Directly from database
• Data import formats:
  • CSV
  • ODF
  • Other
• Other data import formats:
  • Excel
  • PDF

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)

Availability and resilience

• Guaranteed availability: When hosted with our tier 3 data centre partner our application can achieve 99.9% availability. There is the caveat that the client infrastructure can support this.
• Approach to resilience: We use a tier 3 data centre partner who has their data centres in 2 geographically different locations in the UK. They are in UK South and UK West. The servers are mirrored for maximum resilience.
• Outage reporting: Direct correspondence with clients via email and phone. We have server monitoring tools in place to identify any service outages.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Username or password
• Access restrictions in management interfaces and support channels: Cellma provides role-based user access, giving users access only to the information they are authorised to view or update. The “Private Viewer” user role allows only users assigned with specific user roles within the service to access or view specified patient records (e.g. diagnosis, medications etc.). Service Groups collates users given the services they are authorised to access. Within Cellma there is also the option to have records made private for access only to personnel who have permission to view or edit the record details.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: QMS International
• ISO/IEC 27001 accreditation date: 05/01/2017
• What the ISO/IEC 27001 doesn’t cover: All elements required by the ISO 27001 certification are covered. We also adhere to Cyber Essentials certification and ISO 9001 and ISO 14001.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications:
  • ISO 9001:2015
  • ISO 14001:2015
  • Data Security and Protection Toolkit (DSP Toolkit)
  • Cyber Essentials - Certificate of compliance
  • Information Governance Statement of Compliance (IGSoC Toolkit)
  • ISO 27001: 2013
  • Health and Social Care Network

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: ISO27001

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: As per ISO27001 and ISO9001 accreditations, RioMed deploys Change Management Protocols including the documentation of all changes, scheduled Design Authority meetings both internally and with clients, contract updates, change advisory board and controlled release management.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Our vulnerability management approach is governed our secure development policy, which a requirement of the ISO27001 accreditation.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Protective monitoring is part of ISO27001 accreditation.
• Incident management type: Supplier-defined controls
• Incident management approach: We have an Information Security Incident Management Policy as part of our ISO27001 accreditation Information Security Manual.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: Yes
• Connected networks:
  • NHS Network (N3)
  • Health and Social Care Network (HSCN)
  • Other
• Other public sector networks: HSE in Irish Republic

Social Value

• Covid-19 recovery:

  Covid-19 recovery

  RioMed has a Cellma covid application which is used by many of our existing clients for Contact tracing and Vaccine management in multiple countries.
• Tackling economic inequality:

  Tackling economic inequality

  RioMed can confirm that our policies and project does not unlawfully discriminate against any protected characteristic. RioMed currently adheres to the following policies who follow similar assessments. RioMed can confirm that it complies with all relevant legislation and policies. ; •Equal Opportunities Policy ; ; • Modern Slavery& Human Trafficking Policy ; ; • Safeguarding Policy
• Equal opportunity:

  Equal opportunity

  RioMed can confirm that our policies and project does not unlawfully discriminate against any protected characteristic. RioMed currently adheres to the following policies who follow similar assessments. RioMed can confirm that it complies with all relevant legislation and policies. ; •Equal Opportunities Policy ; • Modern Slavery& Human Trafficking Policy ; • Safeguarding Policy ; • Caldicott Report ; • Confidentiality Code of Practice ; • The Copyright, Designs and Patents Act, 1988. ; RioMed recognizes the importance of reliable information, both in terms of the clinical management of individual patients on Cellma and the efficient management of services and resources within RioMed itself.
• Wellbeing:

  Wellbeing

  RioMed abides with the Well-being of Future Generations Act by trying to improve the social, economic, environmental, and cultural well-being. RioMed is helping the healthcare industry go digital so that the people can have easy access to all their health records and their GP’s. Also going paperless has a good environmental impact. ; Implementation of this system will prevent persistent problems such as health inequalities, pollution by saving fuel of patients as they can consult with their doctors online. Digitalization of the healthcare industry will make a long-lasting, positive change to current and future generations.

Pricing

• Price: £15 a user a year
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Sandbox environment is provided for 1 or 2 weeks as requested by the buyer.

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at enquiry@riomed.com. Tell them what format you need. It will help if you say what assistive technology you use.