Gooroo is an online demand and capacity planning software for the NHS. Forecasts demand, activity, waiting lists, waiting times, capacity and money along complex patient pathways. Presents results week-by-week and patient-by-patient. Integrates elective, non-elective planning; seasonally optimises hospital capacity; can be automated; and analyses capacity productivity and patient scheduling processes.
- Demand, capacity planning, performance improvement
- Automation for integration into local performance management systems
- Integrated patient scheduling simulator
- Accepts anonymised standard NHS data from multiple sources
- Forecasts overall, monthly and weekly results
- Built-in and custom modelling scenarios and reports
- On-screen editor for rapid scenario testing
- Rapid initial deployment and ongoing support and maintenance
- Designed to minimise the impact of common data errors
- Built-in online collaboration tools
- Integrate non-elective and elective capacity planning
- Plan capacity and waits along complex pathways such as cancer
- Plan and manage waiting times for repeat and follow-up care
- Clearly distinguish between recurring and non-recurring requirements
- Automatically reprofile routine activity to smooth capacity through the seasons
- Reduce high marginal cost of top-up capacity; Safeguard clinical priorities
- Visualise, understand and manage the root causes of long waits
- Optimise Referral to Treatment / RTT
- Visualise the drivers of theatre productivity
- Model at detailed level: specialty, sub-specialty, consultant, site
£1000 to £18000 per licence per year
Egress Group Ltd
|Software add-on or extension||Yes, but can also be used as a standalone service|
|What software services is the service an extension to||EDQM|
|Cloud deployment model||Private cloud|
|Email or online ticketing support||Email or online ticketing|
|Support response times||4 hour response, Mon to Fri (excl UK public holidays), between 8:30am and 4:30pm.|
|User can manage status and priority of support tickets||Yes|
|Online ticketing support accessibility||None or don’t know|
|Phone support availability||9 to 5 (UK time), Monday to Friday|
|Web chat support||No|
|Onsite support||Yes, at extra cost|
|Support levels||Single level of support provided. Support provided via email, telephone and online facilities. "Support tickets" will be allocated to a team of technical support engineers, with escalation to the Support Manager. Cost of support is included in cost of software use.|
|Support available to third parties||Yes|
Onboarding and offboarding
Online user guides and tutorials are provided.
On-site training can be arranged, if required.
|End-of-contract data extraction||Processed data is downloadable via the web interface before the contract ends.|
Service is terminated and all user access disabled.
Data is stored for two years and three months in case the user decides to start a new contract, then it is automatically destroyed.
Using the service
|Web browser interface||Yes|
|Application to install||Yes|
|Compatible operating systems||Windows|
|Designed for use on mobile devices||No|
|Accessibility standards||None or don’t know|
|Description of accessibility||
Increase/decrease font sizes using browser controls.
Colour is not used as a visual means of conveying information, except in charting for line colours, and in the patient scheduling simulator where it is not the sole means.
Audio is not used as a means for prompting the user to take any action, or for conveying information except in optional support videos.
Clear labels and controls are provided when content requires user input.
Any items in error are identified and the error is clearly explained.
Only the patient scheduling simulator contains flashing: 2x per second, small icon, under user control.
|What users can and can't do using the API||To use the service via the API, users need an API licence, and to download and install our free API client software package. The user configures the API call using the XML configuration file provided, which includes the paths where data should be collected from and where results should be returned to. The API can be run unattended as an automated service. It provides full planning functionality for new planning models, accepts multiple data files, returns all results tables to the client, and makes results available via the web interface. Pre-existing models cannot be updated using the API, although they can be updated on-screen.|
|API documentation formats|
|API sandbox or test environment||No|
|Independence of resources||The service has been designed to scale to meet demand.|
|Service usage metrics||No|
|Supplier type||Not a reseller|
|Staff security clearance||Staff screening not performed|
|Government security clearance||None|
|Knowledge of data storage and processing locations||Yes|
|Data storage and processing locations||United Kingdom|
|User control over data storage and processing locations||No|
|Datacentre security standards||Managed by a third party|
|Penetration testing frequency||Less than once a year|
|Penetration testing approach||Another external penetration testing organisation|
|Protecting data at rest||Physical access control, complying with another standard|
|Data sanitisation process||Yes|
|Data sanitisation type||Deleted data can’t be directly accessed|
|Equipment disposal approach||A third-party destruction service|
Data importing and exporting
|Data export approach||The API returns all results to the client machine. The web interface allows all processed data to be downloaded as CSV tables, the main report table provides an export to Excel function, and the visual theatres analysis provides an export to PDF function.|
|Data export formats||CSV|
|Data import formats||CSV|
|Data protection between buyer and supplier networks||TLS (version 1.2 or above)|
|Data protection within supplier network||TLS (version 1.2 or above)|
Availability and resilience
Detailed SLAs are agreed with the customer at point of contract negotiation.
As a standard, service availability is guaranteed at 99%, during core business hours (09:00-17:00).
|Approach to resilience||Available on request.|
|Outage reporting||Server or network outages are reported via the server host's Twitter account, as published on the Gooroo support pages.|
Identity and authentication
|User authentication needed||Yes|
|User authentication||Username or password|
|Access restrictions in management interfaces and support channels||Role Based Access Control is employed.|
|Access restriction testing frequency||At least once a year|
|Management access authentication||Username or password|
Audit information for users
|Access to user activity audit information||No audit information available|
|Access to supplier activity audit information||No audit information available|
|How long system logs are stored for||At least 12 months|
Standards and certifications
|ISO/IEC 27001 certification||No|
|ISO 28000:2007 certification||No|
|CSA STAR certification||No|
|Other security accreditations||No|
|Named board-level person responsible for service security||No|
|Security governance accreditation||No|
|Security governance approach||Internal security policies, procedures and training.|
|Information security policies and processes||
Internal policy and procedures are followed. These are available on request.
The policy dictates Account and Password management requirements; Data handling procedures and Responsibilities; and Employee responsibility and issue escalation.
The Egress security policies are disseminated to staff via internal training and any Information Security concerns are raised via the internal service desk software and escalated to the Operations Director for immediate review. Egress management reserve the right to conduct an internal audit on projects to ensure that best practice is being followed and policy is being adhered to.
|Configuration and change management standard||Supplier-defined controls|
|Configuration and change management approach||Software versioning tools are employed. Change management is tracked via an internal change ticketing system. There is an Change Control policy for software versioning (available on request). Recent versions of system documentation are archived.|
|Vulnerability management type||Supplier-defined controls|
|Vulnerability management approach||
Non urgent software patches are released as scheduled upgrade. Any urgent software updates are applied as soon as regression testing is completed.
Potential threats are identified via the service support helpdesk.
|Protective monitoring type||Undisclosed|
|Protective monitoring approach||When potential compromises are identified by us or notified by users, we escalate immediately to the relevant third-party supplier to respond. They would typically respond to a significant incident within one hour.|
|Incident management type||Supplier-defined controls|
|Incident management approach||
Incidents are reported by email, phone or via Egress's online support desk system. The status and updates on progress of incidents (or linked groups of incidents) can be accessed online with updates provided as per the SLA.
Issue resolution is supported by internal documentation and Knowledge Base for resolution of common problems. This documentation is reviewed by the service desk management.
|Approach to secure software development best practice||Supplier-defined process|
Public sector networks
|Connection to public sector networks||No|
|Price||£1000 to £18000 per licence per year|
|Discount for educational organisations||No|
|Free trial available||No|
|Pricing document||View uploaded document|
|Service definition document||View uploaded document|
|Terms and conditions document||View uploaded document|