SOCIAL RX LIMITED

Social Prescribing Software - Social Rx Connect

Social Rx Connect supports PCNs, CCGs, VCSE organisations, and local authorities with a complete social prescribing software solution. The platform was originally built with input from these parties.

Our service portfolio comprises of the following: IT platform, consultancy support, link worker recruitment & training, and voluntary sector capability development

Features

  • Remote Access
  • Secure HSCN access to application
  • Software hosted by customer, accessed through NHS Cloud
  • Software browser based for ease of access

Benefits

  • Improving information exchange
  • Multiple device access via secure browser
  • Real-time access to workflow
  • Analytics dashboard for data interpretation

Pricing

£1,000 to £30,000 a licence a year

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at matt.sweeney@promaticadigital.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 12

Service ID

4 7 9 8 8 9 8 7 5 3 2 5 9 0 6

Contact

SOCIAL RX LIMITED Matthew Sweeney
Telephone: 07800740824
Email: matt.sweeney@promaticadigital.co.uk

Service scope

Software add-on or extension
No
Cloud deployment model
Hybrid cloud
Service constraints
No
System requirements
Software licencing

User support

Email or online ticketing support
Email or online ticketing
Support response times
This will depend on the SLA, typically 24 hours excluding weekends
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
WCAG 2.1 AA or EN 301 549
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
No
Onsite support
Yes, at extra cost
Support levels
First line filtering support
Technical assistance will be provided as required
Support available to third parties
No

Onboarding and offboarding

Getting started
We will provide user guides and 'hands-on' super-user training, and we have not experienced any 'issues' to date.
We will also provide technical support for new customers as required
Service documentation
Yes
Documentation formats
PDF
End-of-contract data extraction
Data available via database or extracted via csv file, or copy of database will be supplied at decommissioning point.
End-of-contract process
Decommissioning is an additional cost. This may vary from contract to contract.

Using the service

Web browser interface
Yes
Supported browsers
  • Internet Explorer 10
  • Internet Explorer 11
  • Chrome
Application to install
No
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
All essential features can be viewed on mobile devices to support workflow
Service interface
Yes
Description of service interface
Access via login via browser
Accessibility standards
WCAG 2.1 AA or EN 301 549
Accessibility testing
None at present
API
No
Customisation available
Yes
Description of customisation
We can modify workflow to meet customer requirements

Scaling

Independence of resources
We have cloud based service hosting which is highly scalable, and we monitor pressures and procure additional capacity as required.

Analytics

Service usage metrics
No

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Other security clearance
Government security clearance
None

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
United Kingdom
User control over data storage and processing locations
Yes
Datacentre security standards
Managed by a third party
Penetration testing frequency
Never
Protecting data at rest
Other
Other data at rest protection approach
This is the responsibility of our customers who hold the data
Data sanitisation process
No
Equipment disposal approach
A third-party destruction service

Data importing and exporting

Data export approach
This is not required, as all reports are provided on line through the platform.
Bespoke arrangements can be made as required.
Data export formats
  • CSV
  • ODF
Data import formats
CSV

Data-in-transit protection

Data protection between buyer and supplier networks
Private network or public sector network
Data protection within supplier network
Other
Other protection within supplier network
Data is not held by Social RX

Availability and resilience

Guaranteed availability
This is guaranteed by the cloud service provider-typically 99.8%.
Approach to resilience
Data is held by our customers so resilience is their responsibility. Where cloud hosting is taken up, the hosting service will provide this information on request.
Outage reporting
This is a customer responsibility as they host the application and hold the data. If support is required they will use email to request it.

Identity and authentication

User authentication needed
Yes
User authentication
Other
Other user authentication
This is the responsibility of our customers as they host the application
Access restrictions in management interfaces and support channels
This is the responsibility of our customers. When our support staff require access this is authorised by management and supervised by customer staff
Access restriction testing frequency
Never
Management access authentication
Other
Description of management access authentication
This is a customer responsibility

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
User-defined
Access to supplier activity audit information
No audit information available
How long system logs are stored for
User-defined

Standards and certifications

ISO/IEC 27001 certification
No
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Other security certifications
Yes
Any other security certifications
NHS Data Security & Protection Toolkit

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
Other
Other security governance standards
NHS Data Security and Protection Toolkit
Information security policies and processes
Information Security and Data Protection policies. Support staff with access to data are supervised by customer staff

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
The service is tested thoroughly before deployment. We are planning to undertake 'pen-testing' on an annual basis. Any changes to the service will be thoroughly tested before deployment.
Vulnerability management type
Supplier-defined controls
Vulnerability management approach
This is usually identified by the supplier/customer, if any 'gap' is highlighted , we would then respond to it within 24 hrs for 'high risk' situations.
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
Compromises are identified via supplier/customer. We will respond to high-risk compromises within 24 hrs.
Incident management type
Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
Incident management approach
We have adopted the NHS incident management processes and incidents are managed via the incident management reporting tool.
Where we are working with local health economies, where providers are required to follow local arrangements, we will adopt this local requirement.

Secure development

Approach to secure software development best practice
Conforms to a recognised standard, but self-assessed

Public sector networks

Connection to public sector networks
No

Pricing

Price
£1,000 to £30,000 a licence a year
Discount for educational organisations
No
Free trial available
No

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at matt.sweeney@promaticadigital.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.