G-Cloud 11 services are suspended on Digital Marketplace

If you have an ongoing procurement on G-Cloud 11, you must complete it by 18 December 2020. Existing contracts with We are Lean and Agile are still valid.
We are Lean and Agile

Lean Process Modeler and strategic workshops - We are Lean and Agile

The software helps you deliver continuous improvement in your organisations. A platform that helps you map, model and improve your processes faster and better. Save time for your analysts, enable lean across your organisations, identify benefits of change and speed up your delivery, if they sound good get in contact

Features

  • Workshop friendly process modeller and continuous improvement platform
  • Electronic interactive post it sessions and rapid process prototyping
  • Analayse your processes, compare costs, time, value and bottlenecks
  • Online collaboration and sharing of process maps
  • Create process documentation and digital handbook for training/audit
  • Multiple swimlanes available with one click
  • User friendly icons with the ability to add more
  • Gather feedback directly on your maps electronically
  • Enterprise options available for organisational transformation
  • Reports, maps and statistics provided with easy export

Benefits

  • Save 20-40% time for your analysts
  • Build better business cases with fully costed process models
  • Better stakeholder ownership of maps built in the workshop
  • Easy sharing, collaboration and building of process models
  • Easy to compare and assess different process options or phases
  • Cloud hosted on Azure - Full SAAS service
  • Rapid deployment
  • Support for inexperienced teams, new to lean or service improvement
  • Simulation mode to assist with resource smoothing
  • Process handbooks for audit, training and compliance

Pricing

£3,800 an instance a year

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@weareleanandagile.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 11

Service ID

3 0 1 1 6 4 3 1 9 4 9 0 0 8 2

Contact

We are Lean and Agile Andrew Sandford
Telephone: 01803 424050
Email: sales@weareleanandagile.com

Service scope

Software add-on or extension
No
Cloud deployment model
Public cloud
Service constraints
HTML5 compatible browser
System requirements
  • HTML5 compatible browser required
  • Requires internet connection

User support

Email or online ticketing support
Email or online ticketing
Support response times
Within 48 hours for non urgent support.
Weekend support not available
User can manage status and priority of support tickets
No
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
No
Onsite support
Yes, at extra cost
Support levels
Support is standard across all multi user subscriptions
Email and Telephone support available
Webinar support available for suite customers
Support available to third parties
No

Onboarding and offboarding

Getting started
Online tutorials, videos and user guide available
Onsite training available at additional cost
Webinars available for specific customer needs
Online manual and downloadable to a pdf
Service documentation
No
End-of-contract data extraction
Users are able to extract their data using product export tools
End-of-contract process
The customer is responsible for the export of their data using the system tools
At the end of the contract the data will be kept for 6 months then deleted from the cloud.
Data can be deleted earlier for an additional charge

Using the service

Web browser interface
Yes
Supported browsers
  • Internet Explorer 9
  • Internet Explorer 10
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari 9+
  • Opera
Application to install
No
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
Mobile devices have an app and browser based support for brainstorm although other elements can be accessed due to size of process maps it would not be effective to work on a mobile phone. Viewer has an app for Microsoft and Apple tablet devices
Service interface
No
API
No
Customisation available
Yes
Description of customisation
Adding additional process attributes e.g. IT Systems, Locations
Loading documents to attach
Loading new process icons
These can all be done by suite users with the correct access rights

Scaling

Independence of resources
Engage Process solutions are hosted by Microsoft Azure with Automatic Upscaling based on %CPU Usage.

Analytics

Service usage metrics
Yes
Metrics types
Service usage can be provided on demand for customers
Enterprise customers have access to a data dashboard detailing usage
Reporting types
  • Real-time dashboards
  • Reports on request

Resellers

Supplier type
Reseller providing extra support
Organisation whose services are being resold
Engage Process

Staff security

Staff security clearance
Other security clearance
Government security clearance
Up to Baseline Personnel Security Standard (BPSS)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
European Economic Area (EEA)
User control over data storage and processing locations
No
Datacentre security standards
Managed by a third party
Penetration testing frequency
At least once a year
Penetration testing approach
Another external penetration testing organisation
Protecting data at rest
  • Physical access control, complying with another standard
  • Other
Other data at rest protection approach
All Engage Process solutions are hosted with Microsoft Azure. This hosting party was selected for its ultra high level of compliancy, security, global presence, redundancy, and also for its flexibility, compatibility with industry standards and automatic scalability options.

Details of the compliancy and certificates of Microsoft Azure can be found via: https://www.microsoft.com/en-us/trustcenter/compliance/complianceofferings

Detail about the Service Levels are reflected on the Microsoft Azure website via https://azure.microsoft.com/en-us/support/legal/sla/cloud-services/v1_3/

and:
https://azure.microsoft.com/en-us/support/legal/sla/sql-database/v1_1/
Data sanitisation process
Yes
Data sanitisation type
Deleted data can’t be directly accessed
Equipment disposal approach
A third-party destruction service

Data importing and exporting

Data export approach
Tools are available within the modeller to export data from the processes. It can be downloaded in a number of different formats, including Word, Excel, PNG, PDF, Visio, XPDL and XML.
Data export formats
  • CSV
  • Other
Other data export formats
  • Word
  • Visio
  • PDF
  • XPDL
  • BPMN
  • PNG
  • Excel
  • Engage Files
Data import formats
  • CSV
  • Other
Other data import formats
  • Engage File
  • XPDL
  • BPMN
  • BPM One
  • Protos
  • Mavim
  • Excel

Data-in-transit protection

Data protection between buyer and supplier networks
  • TLS (version 1.2 or above)
  • Other
Other protection between networks
Customers can limit logins to only allow certain IP addresses or ranges
Data protection within supplier network
  • TLS (version 1.2 or above)
  • Other
Other protection within supplier network
We rely on the standard Microsoft Azure security offerings. Solutions are hosted with Microsoft Azure, with one of the highest and highest certified levels of security, monitored 24x7.

Availability and resilience

Guaranteed availability
The Engage Process SLA guarantees 98% availability. Since the first launch of Engage Process as a SaaS solution, the availability has met over 99.9%.
The availability performance of Microsoft Azure is among the highest in the world. Also, any product update by Engage Process is staged for production without any disruption to production.
Our database and other storage is mirrored on three servers. Using Microsoft Azure we can spawn new or additional servers for the app and web services within 15 minutes whenever an expansion is needed. We can even distribute them over several geolocations if needed.
Approach to resilience
Our database and other storage is mirrored on three servers. Using Microsoft Azure we can spawn new or additional servers for the app and web services within 15 minutes whenever an expansion is needed. We can even distribute them over several geolocations if needed.
Outage reporting
If the service is out for longer than 2 hours, all customer contacts will be notified by e-mail alerts.
The Engage Process Suite has been available as a SaaS service for 6 years now, always hosted with Microsoft Azure. During this time our customers have experience 1 outage of 10 minutes and 1 outage of 2 hours. The Microsoft Azure service ranks among the highest reliable available in the world. The instances are so rare that we have not seen a need to monitor or report outages.

Identity and authentication

User authentication needed
Yes
User authentication
Username or password
Access restrictions in management interfaces and support channels
Access is controlled by customers in standard user groups depending on the user status i.e. System admin, modeller and viewer users.
Engage Process offers access via username and password. Https can be elected by the customers as well as limiting use of the service from a limited number of IP-addresses.
Access controls can be applied to a very granular level of individual maps and brainstorms
Access restriction testing frequency
At least once a year
Management access authentication
Username or password

Audit information for users

Access to user activity audit information
You control when users can access audit information
How long user audit data is stored for
At least 12 months
Access to supplier activity audit information
Users contact the support team to get audit information
How long supplier audit data is stored for
At least 12 months
How long system logs are stored for
At least 12 months

Standards and certifications

ISO/IEC 27001 certification
No
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Other security certifications
No

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
No
Security governance approach
The Engage Process solutions are hosted with Microsoft Azure. See the first section of this paper for all certifications of Microsoft Azure.
Information security policies and processes
In addition to the extensive Compliancy standards and certifications of Microsoft Azure, Engage Process has a Privacy and Security Policy that is signed by all personnel.

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
The Engage Process solutions are completely developed in-house by dedicated development staff. The developed team uses scrum standards. New functions and features are continuously developed, configured into the tooling and deployed following 2-week“sprints”.
Vulnerability management type
Supplier-defined controls
Vulnerability management approach
Microsoft Azure is highly certified and full time monitored by Microsoft Azure staff.
Engage does not add any extra monitoring to that. Trusting the service of Microsoft Azure we have not experienced a single threat in the past 6 years.
Engage Process development staff has built a strong reputation in the past 6 years, since the start of the SaaS service of our products, to find-fix-deploy a patch or complete solution to any bug in the software within 1 working day. The team is highly responsive and has proven its ability to find solutions instantly.
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
As far as responsiveness of the development team is concerned; Engage Process development staff has built a strong reputation in the past 6 years, since the start of the SaaS service of our products, to find-fix-deploy a patch or complete solution to any bug in the software within 1 working day. The team is highly responsive and has proven its ability to find solutions instantly.
Incident management type
Supplier-defined controls
Incident management approach
Users report incidents through phone, email or online forms.
All incidents are reviewed and triaged by our development team.
Incident reports are provided through email, newsletter and through webinars/conference sessions

Secure development

Approach to secure software development best practice
Supplier-defined process

Public sector networks

Connection to public sector networks
No

Pricing

Price
£3,800 an instance a year
Discount for educational organisations
Yes
Free trial available
Yes
Description of free trial
Free 1 month trial of the suite.
Also included an introductory webinar to get you started (optional)
Link to free trial
https://weareleanandagile.com/contact-us/

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@weareleanandagile.com. Tell them what format you need. It will help if you say what assistive technology you use.