Imosphere Ltd

Formulate

Formulate is a suite of tools and algorithms used by Local Authorities and CCGs to support budgetary decision-making for individuals requiring care and support. Formulate includes the functionality of a Resource Allocation System (RAS) covering adults with social care, CHC or Section 117 needs, carers, and children & young people.

Features

  • Tools can be built into compatible local systems
  • Real-time Estimated Budget calculations for individuals
  • Algorithm web service for calculations accessible remotely from local systems
  • Algorithms available as SQL and JavaScript where required
  • Optional hosted digital platform available for online completion of tools
  • Remote updates to algorithm configuration as things change
  • Self-service online reporting tools for form answers and budget information

Benefits

  • Digitally capture profiles of need for every individual requiring support
  • Quickly calculate accurate estimated budgets to facilitate good support planning
  • Have confidence in estimated budgets reflecting local costs and priorities
  • Feel prepared for judicial reviews by using proven, tested tools
  • Compare your organisation with others using benchmarking reports
  • Be assured of accurate estimated budgets through comprehensive testing processes
  • Develop closer integration between services using the funding split outputs
  • Monitor budget allocations through straightforward but powerful online reporting
  • Improve 'moving to adulthood' processes through common configuration decisions
  • Digitise budget-setting workflow where systems are still paper-based

Pricing

£6,000 an instance

  • Free trial available

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at oliver.brown@imosphere.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 12

Service ID

1 9 9 5 1 0 0 2 4 9 1 2 6 3 9

Contact

Imosphere Ltd Oliver Brown
Telephone: 0800 802 1884
Email: oliver.brown@imosphere.co.uk

Service scope

Software add-on or extension
Yes, but can also be used as a standalone service
What software services is the service an extension to
The tools and algorithms are often built into a Local Authority or CCG's existing health, social care or education IT system and so become an extension of that system - but are a standalone service where used on our optional digital cloud-based platform (Care Partner).
Cloud deployment model
Public cloud
Service constraints
There is a brief monthly maintenance window for the algorithms web service timed to be outside of UK core office hours. The algorithms web service uses SOAP and support TLS 1.2 minimum for integrating with 3rd party IT systems.
System requirements
  • The algorithms web service uses SOAP technology for integration
  • The algorithms web service supports TLS 1.2 minimum for integration
  • Care Partner is hosted in HSCN or via site-site VPN
  • Licences for the tools/algorithms per cohort are organisation-wide

User support

Email or online ticketing support
Email or online ticketing
Support response times
We will acknowledge customer support queries within one working hour. We aim to respond to queries within one working day. More complex questions may take longer.
User can manage status and priority of support tickets
No
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
No
Onsite support
Onsite support
Support levels
During the implementation period, as part of the standard SLA we provide regular on-site visits to facilitate configuration decisions, IT systems implementation, and system testing before go-live, as well as 9-5 email and phone support provided by our consultancy team (including product and system experts). We offer a number of training and e-learning options at additional costs to support a successful implementation.

After implementation, and for the lifetime of the contract, we provide a standard package of support which includes 9-5 email and phone support provided by our consultancy team, as well as a number of consultancy days to cover algorithm updates and on-site 'health check' activities.

Additional time outside of the standard SLA can be purchased at an additional cost.
Support available to third parties
Yes

Onboarding and offboarding

Getting started
We recommend planning training early on and establishing the elements you want it to cover, because supporting people to have the knowledge they require about the change increases the chances of internal adoption.

We offer several different types of training and this is recommended alongside internal training about changes to processes. Our standard training consists of half-day group workshops explaining how to use the tools and algorithm outputs, their benefits, and the importance of accurate completion. We provide manager training sessions which focus on common issues and understanding how the algorithm works in more detail. We also provide e-learning which can act as reinforcement or demonstration of ability. Additionally, we provide extensive training materials and product documentation and regularly ‘tweak’ these to suit local requirements.

In respect of ‘go live’, we are able to provide ‘floor-walking’ support on-site with your practitioners as they begin to put their first cases through the system – providing guidance and assurance at this key stage – and answering any queries.

We also provide familiarisation workshop sessions for the analytics software where this is used, so managers can begin to build reports which help in local understanding of service user needs and spend.
Service documentation
Yes
Documentation formats
  • HTML
  • PDF
End-of-contract data extraction
For Local Authority/CCG customers calculating via the Formulate web service, with regards to the return and deletion of data should the contract be terminated, the data export app within the analytics software would be used, either directly by a customer representative (or by an Imosphere representative on the customer's behalf who would then supply to the customer) to download all of the data in CSV format. CSV data is one of the most widely accepted and portable data formats.

For Local Authority/CCG customers calculating via an internal script within their local system(s), there would be no data from live usage of the algorithm(s) being held by Imosphere and therefore no data to return.
End-of-contract process
Having agreed the end point of the contract, allowing time for export of the data required, we would disable all access to the relevant system(s) and securely destroy data held on our systems (including the databases of both the analytics software and the web service) in line with our data sanitisation processes. Any user accounts and related information would also be destroyed. We retain financial information regarding our relationship for the period required by HMRC. The above is included in the price of the contract.

Additional data export services and migration consultancy are available at an additional cost.

Using the service

Web browser interface
Yes
Supported browsers
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Opera
Application to install
No
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
This does not apply where the tools/algorithms are accessed via the web service from a 3rd party IT system.

Where our Care Partner system is used to access the tools/algorithms on a mobile device, assuming the device can access the service with respect to network and firewalls, the system is designed to allow core data and features to be accessed. This may differ in presentation and appearance compared to the desktop view to accommodate differences in screen sizes and available visual space.

Where our analytics system is used (Atmolytics), this has not been designed for use on a mobile device.
Service interface
Yes
Description of service interface
Where a Local Authority or CCG wishes to use the tools/algorithms within their local health, social care or education IT system, our cloud-hosted algorithms web service is available to connect to from any such compatible system via a SOAP interface.

Where a Local Authority or CCG wishes to use the tools/algorithms within our Care Partner system, Care Partner has a built-in interface with the algorithms web service.

Our hosted analytics platform (Atmolytics) is automatically populated with relevant data from use of the web service through its own interface with the web service data repository.
Accessibility standards
None or don’t know
Description of accessibility
N/a
Accessibility testing
N/a
API
No
Customisation available
Yes
Description of customisation
Firstly, there are various options for how to set-up the tools/algorithms for use by local practitioners - depending on existing local IT setup. These range from connectivity between an existing core system and the Imosphere web service to embedding of the relevant algorithm into the local system. We work with your IT staff to achieve the required setup.

Secondly, a key activity during implementation of Formulate is completion of the local ‘Configuration template’ - the key deliverable for the Local Authority and/or CCG. It sets out each step of the algorithm’s allocation process and explains the options available for configuring to reflect local circumstances and costs. This process and the expertise we offer in supporting it are essential in ensuring that the algorithm's use promotes financial sustainability – and provides a clear record of all decisions. Once the document has been completed (involving senior representatives from finance, commissioning and front-line practice), the decisions are applied by Imosphere to the algorithm.

Lastly, the cloud-hosted reporting platform provided is designed to be highly user-configurable, with a very wide range of options. Users can build their own reports and reporting cohorts without any specialist skills, and share them with others.

Scaling

Independence of resources
For customers calculating via the Formulate web service, the enterprise server dealing with calculation requests is heavily resourced. The logical tenanting structure of the algorithm setup ensures that concurrent requests from distinct organisations are processed independently. The majority of activity on the server involves reading from the database with very few write requests, keeping the likelihood of disruptive locks extremely low.

Managing user demand is not applicable for customers calculating via an internal script within their local system(s).

For customer using the analytics system, available resource significantly outstrips demand as user numbers per organisation tend to be small.

Analytics

Service usage metrics
Yes
Metrics types
Customers calculating via the Formulate web service can use the cloud-hosted analytics software to develop custom dashboards showing metrics based on a frequent data refresh. If preferred, regular and one-off extracts of data from the web service database can be sent to customers directly by an Imosphere representative which will show numbers of cases submitted through the system together with dates and times.

For customers calculating via an internal script within their local system(s), data from live usage of the algorithm(s) is not held by Imosphere and therefore arrangements for providing service metrics need to be made locally.
Reporting types
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Other security clearance
Government security clearance
Up to Baseline Personnel Security Standard (BPSS)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
United Kingdom
User control over data storage and processing locations
No
Datacentre security standards
Managed by a third party
Penetration testing frequency
At least once a year
Penetration testing approach
Another external penetration testing organisation
Protecting data at rest
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
Data sanitisation process
Yes
Data sanitisation type
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
Equipment disposal approach
A third-party destruction service

Data importing and exporting

Data export approach
For Local Authority/CCG customers calculating via the Formulate web service, the data export app within the analytics software can be used to download all of the data in CSV format. If preferred, customers can request regular extracts of data from the web service database to be sent to them directly by an Imosphere representative (for example, on a weekly basis).

For Local Authority/CCG customers calculating via an internal script within their local system(s), data from live usage of the algorithm(s) is not held by Imosphere and therefore arrangements for extraction of data need to be made locally.
Data export formats
CSV
Data import formats
Other
Other data import formats
N/a

Data-in-transit protection

Data protection between buyer and supplier networks
  • Private network or public sector network
  • TLS (version 1.2 or above)
Data protection within supplier network
TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability
For customers calculating via the Formulate web service, the service is intended to be available continuously except for periods of maintenance or upgrades. Support will be available during core working hours. Any maintenance or scheduled tasks are triggered out of regular working hours, from 10pm.

In the event of service availability falling below our KPI minimum percentage standard of 99.99% during 24x7 hours, 4% of annual licence costs will be credited. Availability performance of the Live systems over the past year has been 99.99% over 24x7 hours.

For customers calculating via an internal script within their local system(s), service availability is not applicable.
Approach to resilience
Information is available on request.
Outage reporting
Outage reports and notifications of planned work that may affect services are available via a public dashboard. Detailed information, including where individual customers may be affected is provided via email alerts.

Identity and authentication

User authentication needed
Yes
User authentication
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password
Access restrictions in management interfaces and support channels
For customers calculating via the Formulate web service, restricted access is not relevant as this is automated integration between a local system and the web service, rather than a front-end system.

For customers calculating via an internal script within their local system(s), this is also not relevant.

For customer using our cloud-hosted Care Partner and/or analytics (Atmolytics) systems, only users assigned Administrator permissions can access management interfaces.
Access restriction testing frequency
At least every 6 months
Management access authentication
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
At least 12 months
Access to supplier activity audit information
Users have access to real-time audit information
How long supplier audit data is stored for
At least 12 months
How long system logs are stored for
At least 12 months

Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
LRQA
ISO/IEC 27001 accreditation date
22/01/2013
What the ISO/IEC 27001 doesn’t cover
All operations of the business are within scope.
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Other security certifications
Yes
Any other security certifications
Cyber Essentials

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
ISO/IEC 27001
Information security policies and processes
Our Information Security Management System is an integrated framework of policies and procedures developed in compliance with ISO 27001 and includes, amongst others: employee screening & training, record classification and retention, information risk and opportunity management, data protection impact analysis, change management, incident management, business continuity, relationships with suppliers and third parties, network & access control, cryptographic controls, pseudonymisation and de-identification, and physical security.

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
Documented and independently audited configuration and change management process.
Vulnerability management type
Supplier-defined controls
Vulnerability management approach
Patches are deployed on a monthly scheduled basis following testing in a lab environment. Critical patches are deployed following our emergency change process. Multiple sources are used for information: independent security organisations (i.e. BugTraq, Full Disclosure), vendors, government (e.g. NCSC, NIST), published information from security organisations and professionals and security conferences.
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
We monitor activity at the firewall and internal detection systems based on log monitoring.
Incident management type
Supplier-defined controls
Incident management approach
Our incident management process is based on the ITIL approach and includes consideration of prioritisation, proportionate response, monitoring, escalation and retrospective review. All employees are trained on the incident reporting and management approach. Senior management monitor issues in aggregate and on specific escalated issues, including performance against internal and external SLA standards.

Secure development

Approach to secure software development best practice
Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

Connection to public sector networks
Yes
Connected networks
  • NHS Network (N3)
  • Health and Social Care Network (HSCN)

Pricing

Price
£6,000 an instance
Discount for educational organisations
No
Free trial available
Yes
Description of free trial
We enable interested organisations to put local cases through a hosted demonstration system (anonymised) where desired. The demonstration algorithms are configured with average/common rates and decisions, so there is a caveat that results will not necessarily reflect local arrangements. This option is normally offered for up to 1 month.

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at oliver.brown@imosphere.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.