PRODIGY LEARNING LIMITED

Skillify

Skillify is a highly functional and customisable web-based learning and assessment platform - deliver content, test & credential skills hosted on Microsoft Azure.

Features

  • Summative assessment
  • Formative assessment
  • Standardised testing
  • Highly Functional & Flexible
  • Fully Customizable
  • Detailed Reporting
  • Digital badging & certification
  • Extensive custom course authoring
  • Proctored exams
  • Multiple question types

Benefits

  • Adaptive user interface - works with a variety of devices
  • Easily create assessments of various question types
  • Comprehensive course authoring with multiple content formats (text, video etc..)
  • Fully brandable interface
  • Support for Single Sign On
  • Support for multiple languages
  • Automated marking of assessments
  • Export data to standard formats
  • Interoperable with other platforms via LTI or API

Pricing

£120 to £240 a user a year

  • Education pricing available
  • Free trial available

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@prodigylearning.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 12

Service ID

8 1 3 1 7 5 5 8 0 5 2 2 8 6 9

Contact

PRODIGY LEARNING LIMITED Andrew Griggs
Telephone: 08453991551
Email: info@prodigylearning.com

Service scope

Software add-on or extension
No
Cloud deployment model
Private cloud
Service constraints
None
System requirements
HTML 5 / CSS3 / JavaScript enabled web browser

User support

Email or online ticketing support
Email or online ticketing
Support response times
Within 24 hours during general office hours (Monday to Friday, 8am to 5pm) Response times will be delayed at weekends and answered on Monday mornings.
User can manage status and priority of support tickets
No
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
No
Onsite support
Yes, at extra cost
Support levels
Support levels are defined on a per contract basis based on the customers requirements.

Standard level of support is is offered remotely and we operate a three tiered process for triaging support queries - Tier 1 = general user support, Tier 2 = escalated account issues handled in office, Tier 3 = escalated issues to software developers.
Support available to third parties
Yes

Onboarding and offboarding

Getting started
Comprehensive onboarding is proved for all customers. This can take the format of onsite or online training depending on the customers requirements.
This onboarding is usually customised to a customers particular requirements - whether they are focused more on assessment or content delivery.
Typically onsite training is used to train the core administrative users and online training to enable the knowledge to be disseminated.
User documentation varies by customer - some prefer online video based tutorials whilst others prefer a traditional handbook.
Depending on the size of contract a dedicated support person / email / phone number may be set up for a customer.
If the customer has any questions or needs product support they can contact the Prodigy Learning Team on +44 845 399 1551 (UK) / +353 1 293 2924 (Ireland) or email support@prodigylearning.com.
Service documentation
Yes
Documentation formats
  • HTML
  • PDF
End-of-contract data extraction
Data can be extracted from the platform at any point by the Organisation Administrator, not only at the end of contract.
The Organisation Administrator has access to the ability to export all data on the platform related to an organisation to a series of CSV files though a simple web user interface.
This data can then be used to migrate to another platform or archived.
The platform is GDPR compliant - a user can remove all their data easily under the right to erasure from the user control panel.
End-of-contract process
Near the end of the contract dialogue with the customer is entered into to discuss the options available - either continuation of service (and associated costs, updated contract etc) or expiration of the service and their ability to extract all data.

Should the customer decide not to continue with the service their access (and all their users access) will automatically cease on the end of contract date.

The Supplier reserves the right not to renew any license for any reason without notice.

Using the service

Web browser interface
Yes
Supported browsers
  • Internet Explorer 10
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari 9+
  • Opera
Application to install
No
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
An adaptable user interface has been utilised to provide the same experience to users on devices of any form factor - from mobile phones to large monitors.
Service interface
Yes
Description of service interface
Skillify has a secure Application Programming Interface for external components to interface with.
This API is highly secured and exposes all the functionality of the platform.
An easier to use Learning Tools Interoperability integration is also available to integrate Skillify with other platforms that support LTI without having to use any code.
Accessibility standards
None or don’t know
Description of accessibility
We are working towards WCAG 2.1.
Currently Skillify has built in accessibility functionality to modify:
- Adjust contrast
- Keyboard navigation
- Highlighting links
- Cursor size
- A line to assist with reading
Accessibility testing
None
API
Yes
What users can and can't do using the API
The API exposes all functionality of the Skillify platform.
Users can add/modify/delete questions, tests, courses and content via the API. They can also use the API to access the extensive reporting features of the platform.
An API key is provided through the Organisation Administrator account in the web UI to provide secure access to the API.
API documentation
Yes
API documentation formats
PDF
API sandbox or test environment
No
Customisation available
Yes
Description of customisation
The user interface allows for extensive customisation to brand the platform to the customers requirements.
The colour scheme used for various components and the logo, tab icon and URL can all be customised. All customisation is easily performed through the web UI.
Organisation Administrators can perform the customisation.

Scaling

Independence of resources
Skillify is hosted on the secure Microsoft Azure cloud platform and has been designed to be scalable and take advantage of the scalability features of Azure.
Automatic scaling is in place to enable Skillify to scale if required so that users are not affected by others placing high levels of demand on the service.

Analytics

Service usage metrics
Yes
Metrics types
The reporting functionality built into Skillify allows for administrative users to report on test results and course usage, progression and completion data. The reporting also allows administrators to view a users individual interactions with the platform through an activity report.
These reports can be viewed on screen or exported to PDF or CSV.
Reporting types
  • API access
  • Real-time dashboards
  • Reports on request

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Staff screening not performed
Government security clearance
None

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
EU-US Privacy Shield agreement locations
User control over data storage and processing locations
No
Datacentre security standards
Supplier-defined controls
Penetration testing frequency
Never
Protecting data at rest
  • Physical access control, complying with another standard
  • Encryption of all physical media
Data sanitisation process
Yes
Data sanitisation type
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
Equipment disposal approach
In-house destruction process

Data importing and exporting

Data export approach
Users can export data through the extensive reporting mechanism built into the platform. The reporting functionality allows for exporting of various data on the platform such as assessment results, course activity, user interaction. Reports can be viewed onscreen or downloaded in PDF or CSV format.
An Organisation Administrator can export all data for an Organisation into CSV format through the web UI.
Data export formats
  • CSV
  • Other
Other data export formats
PDF
Data import formats
CSV

Data-in-transit protection

Data protection between buyer and supplier networks
TLS (version 1.2 or above)
Data protection within supplier network
  • TLS (version 1.2 or above)
  • Other
Other protection within supplier network
The Azure Firewall is deployed between our data storage layer and data access layer and mechanisms are in place to only allow the data storage layer to be accessed by the data access layer.

Availability and resilience

Guaranteed availability
Skillify is hosted on the Microsoft Azure platform which has averaged an uptime of 99.995% across its global cloud infrastructure in the 12 Months to July 2019 (equivalent to an average of 26m 17s of downtime annually).
Source: https://azure.microsoft.com/en-us/blog/advancing-microsoft-azure-reliability/

Any failure to meet an SLA will be contract specific.
Approach to resilience
Skillifiy is hosted on the secure Microsoft Azure cloud which provides a number of features to aid resilience.
The Azure Web Application Firewall is used to provide protection for the top 10 Open Web Application Security Project (OWASP) security vulnerabilities.
Protection against Distributed Denial of Service attacks is also provided by the Azure platform.

Further information available upon request.
Outage reporting
Any planned maintenance outages are communicated well in advance via email and published on our publicly accessible support page. A messaging component is built into Skillify to allow communications of this nature.
Any unplanned outages are communicated via this support page and email to all customers.

Identity and authentication

User authentication needed
Yes
User authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
Access restrictions in management interfaces and support channels
Multiple user roles are built into Skillify. These roles provide a granular approach to access to features in the platform including management interfaces. Users can be in multiple roles.
The role a user is in will determine which management/administrative functions they can perform such as adding/modifying users, adding/modifying content on assessments and courses or which data they can access in a report.
Access restriction testing frequency
Never
Management access authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
At least 12 months
Access to supplier activity audit information
Users contact the support team to get audit information
How long supplier audit data is stored for
At least 12 months
How long system logs are stored for
At least 12 months

Standards and certifications

ISO/IEC 27001 certification
No
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Other security certifications
Yes
Any other security certifications
ISO27001 certification in progress

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
No
Security governance approach
ISO 27001 is in progress.
We currently have an Information Security Management System policy.
Information security policies and processes
Prodigy Learning is committed to maintaining and developing an information security system infrastructure, which has an extensive level of security and data protection. All systems are required to have a minimum-security framework.
Our Information Security Management policy is a set of policies and procedures for systematically managing the organisation's sensitive data. The goal of this ISMS is to minimize risk and ensure business continuity by pro-actively limiting the impact of a security breach.
The Information Security of Skillify is managed by the Chief Architect and the Product Manager.
The CEO is ultimately responsible for Information Security.
Data for Skillify is hosted on Azure SQL which provides high availability, scalability and security. Data is encrypted at rest and data discovery and classification is built into Azure SQL to provide the labelling and classification of sensitive data. Azure SQL also has extensive auditing features which can provide an audit trail for reporting.

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
Changes are firstly deployed to a test environment for verification of functionality and any effect on system stability or security.
Upon verification that the change will not impact system stability or security the update is deployed to the live environment by the Chief Architect.
Vulnerability management type
Undisclosed
Vulnerability management approach
Patches are tested in the test environment first before being deployed to the live environment upon a successful test.

National Vulnerability Database from NIST and various social media, news and blog sites are used to gather information about potential threats.
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
Skillify has multi-tiered breach protections and procedures including:
Azure signature-based alarms such as anti-malware, intrusion detection or via algorithms designed to profile expected activity and alert upon anomalies, Azure Advanced Threat Protection (detect and notify unusual or suspicious behaviour) and Customer Breach Reports and notifications via Azure Security Centre.
When a potential compromise is detected logs are and Azure dashboards are analysed to determine if the compromise was genuine or not.
All incidents are responded to as soon as possible.
Incident management type
Undisclosed
Incident management approach
Users can report incidents via our support desk.

Secure development

Approach to secure software development best practice
Supplier-defined process

Public sector networks

Connection to public sector networks
No

Pricing

Price
£120 to £240 a user a year
Discount for educational organisations
Yes
Free trial available
Yes
Description of free trial
Free demo sites can be arranged on a per customer basis.

Limitations are usually on a per customer basis but in general the service is provided for evaluation purposes only.

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@prodigylearning.com. Tell them what format you need. It will help if you say what assistive technology you use.