The Application Hurdle Assessment is the process whereby 3rd party applications are reviewed by the NHSmail Technical Design Authority (TDA) to determine suitability for integration with the NHSmail Tenant. The purpose of a hurdle assessment is to determine whether an application would cause any significant impact to the NHSmail tenant and if some specific criteria around data residency, security and assurance are satisfied. It is not intended to be a full assessment of whether an application is suitable for use by NHS organisations.
This page documents the 3rd party applications which have passed the hurdle assessment and hence are available with the NHSmail Azure AD / Office 365 tenant. It does not include the core Microsoft Office 365 applications.
Local organisations must provide the following information when raising an application enablement request via [email protected]:
- Technical details of how an application integrates with the O365 environment
- Details of the level of permissions that an application requires
- Proof of where data resides as provided by the application provider
Any application data which resides out of the UK or EU cannot be supported and these requests will be rejected. Although assessments are carried out at tenant level and summaries provided, we recommend that local organisations conduct their own internal assessments prior to using an application. This is to ensure the application is appropriate for an organisation’s specific use case in terms of functionality and adheres to any local security or clinical safety requirements.
ClickUp
| Description | ClickUp is a productivity tool for managing tasks and projects, and includes a health template to manage patients. The product has similar capabilities to Microsoft O365, such as functionalities within SharePoint lists, Calendars and Planner. ClickUp also integrates with Microsoft Teams, with features such as users receiving notifications when tasks are edited in the ClickUp web version, and using Teams client search to retrieve and discuss a task. |
| Website | https://clickup.com/ |
| Data Residency / Privacy Information | https://clickup.com/privacy |
| Application Support | Provided by ClickUp |
| Important Notes | Clinical safety impact: A patient tracking system is included as a template, and tracks data including name, medication and allergies. Risk exists of patient data residing outside of approved NHS systems.
Licensing: ClickUp licensing is additional to Office 365 licensing. There are 4 plans – “Free Forever”, Unlimited ($5 pmm), “Business” ($9 pmm) and “Enterprise”. The free version has limited security or data privacy polices and so paid versions are recommended. |
Go To Meeting
| Description | GoToMeeting is a video conferencing provider, with an add-in for Microsoft Teams that allows users to start and join meetings. |
| Website | https://www.gotomeeting.com/en-gb |
| Data Residency / Privacy Information | https://www.logmeininc.com/legal/privacy |
| Application Support | Provided by GoToMeeting |
| Important Notes | Licensing: All users would require additional GoToMeeting licensing (outside of Office 365). There is a 14 day free trial.
Local Considerations: Local organisations should impact assess the network configuration and desktop application installation for the GoToMeetings Application. There is no installation required for the Teams add-in. |
MedxNote
| Description | Medxnote is a Robotic Clinical Assistant (RCA) platform that connects with existing Health Information Technology (HIT) systems and Microsoft Teams. It aims to link doctors and nurses to any clinical data at the point of care, to drive informed clinical decision making and to help clinicians discharge patients more efficiently.
Medxnote improves patient throughput by connecting Health Information Technology (HIT) systems with Microsoft Teams. The Medxnote platform is an open and extensible platform featuring HL7 FHIR integration and the ability to build a chatbot for a variety of clinical use cases. |
| Website | https://medxnote.com/ |
| Data Residency / Privacy Information | https://medxnote.com/privacy-policy/ |
| Application Support | Provided by Medxnote |
| Important Notes | Clinical Data usage in Teams: Medxnote integrates with organisations HIT systems and allows for the pushing of clinical data to user Teams accounts. It is important to note that integration with HIT/EHR systems would be the responsibility of the Trust and potential risks assessed appropriately.
Data Management: Specific use cases would need to be assessed for data privacy compliance. Medxnote asserts HIPAA, HL7 FHIR and GDPR compliance. The application pushes EHR data to Teams users through bots. This can be configured to push records based on criteria setup as part of individual use cases. These include the notification of results and pushing information on patients who present with specific criteria to certain doctors/users. The usage of EHRs in Teams must be assessed very carefully – links will be saved to channels which means access to those Teams must be carefully managed. Integration: Each organisation would need to configure integration with their on-premise systems if required and conduct appropriate testing. |
Miro
| Description | Miro is a third party application for creating whiteboards with digital sticky notes for planning and management of Agile workloads. |
| Website | https://miro.com/ |
| Data Residency / Privacy Information | https://miro.com/legal/privacy-policy/ |
| Application Support | Provided by Miro |
| Important Notes | Licensing: A free edition of Miro is available but is very limited. There are a number of plans that come with a cost – these start from $8 per user per month but the Enterprise Plan is a custom model. All plans above a free plan allow anonymous guest editing to be enabled which allows users to invite anybody to view the board and edit.
Organisation-wide Sharing: Default sharing within the application allows users to share content with any individual. The Enterprise Plan allows Miro admins to restrict access to particular domains but other plans cannot be restricted in a similar way. Boards can be restricted to particular individuals but this is down to the manager of the board and cannot be set Miro wide. Training: The Teams add-in requires users to connect to Miro using a bot framework which may not be immediately obvious, so local direction or training may need to be made available. |
Mural
| Description | Mural is a digital workspace for visual collaboration which provides visual sharing on a flexible web and mobile play space. The application allows users to drag and drop sticky notes, images, links, and documents on a shared canvas. Mural can integrate with Microsoft Teams through custom tabs, notification bots, and a messaging extension. |
| Website | https://www.mural.co/ |
| Data Residency / Privacy Information | https://www.mural.co/terms/privacy-policy |
| Application Support | Provided by Mural |
| Important Notes | Licensing: All users require additional Mural licensing. There is a 30 day free trial.
Permissions: The users for Rooms and Murals are Owner and Members. Permissions for Members include Viewer, Editor and Facilitator. 3rd party integration: As a 3rd party app, Mural requires connections with external data sources. Mural integrates with Slack, Jira, and GitHub as well as with Teams. Data sharing: Sharing is managed by owners and will need to be carefully managed to ensure data is not inadvertently disclosed. |
MyAnalytics
| Description | MyAnalytics is an optional add-on for many M365 Licenses. The service aggregates activity data from information within Microsoft Exchange, Microsoft Teams, and optionally Windows 10. It gives users individual insights into the time spent on various activities, and metrics to track changes in their behavior with the aim of promoting productivity as well as rest. |
| Website | https://www.microsoft.com/en-gb/microsoft-365/business/myanalytics-personal-analytics |
| Data Residency / Privacy Information | MyAnalytics is a purely personal insight into work activities and is not accessible by managers or administrators. Managers can get insights around their team but this is purely based off information in their own mailbox and Teams. All data is GDPR compliant. All users have the ability to opt in or out of features within My Analytics when given a license. |
| Application Support | Provided by Microsoft |
| Important Notes | Local Administration: Users can be managed on an individual basis based on whether they are set to opt in or out of the service by local administrators. Insight from MyAnalytics are only shared with the individual user.
Local Consideration: There is an additional Outlook add-in available that can be deployed by organisations locally. |
NearPod
| Description | Nearpod is a productivity and student engagement tool to facilitate education and teaching – with features supporting the user to make lessons more interactive. Teams integration allows the sharing of Nearpod lessons through Microsoft Teams. |
| Website | https://nearpod.com |
| Data Residency / Privacy Information | https://nearpod.zendesk.com/hc/en-us/articles/360049188592 |
| Application Support | Application support should be provided by Nearpod directly |
| Important Notes | Licensing: To use the application, a license will need to be purchased directly from Nearpod.
Organisation wide Sharing: There does not appear to be any features which would allow organisation wide sharing. |
StarLeaf
| Description | StarLeaf is a video conferencing and collaboration software that provides cloud based messaging, meeting and calling. Teams integration includes a video meeting feature. |
| Website | https://www.starleaf.com |
| Data Residency / Privacy Information | https://support.starleaf.com/legal-information/starleaf-privacy-notice/
https://support.starleaf.com/legal-information/starleaf-cloud-services-customer-terms-of-use/ |
| Application Support | Application support should be provided by StarLeaf directly |
| Important Notes | Licensing: To use the application, a license will need to be purchased directly from StarLeaf.
Organisation wide Sharing: There does not appear to be any features which would allow organisation wide sharing, integration with Teams is simply a video meeting feature. |
Virtual Visits
| Description | Virtual Visits allows clinicians to meet with patients virtually via the Microsoft Teams Booking app. Appointments are booked as an online meeting, with attendees receiving a unique link to join the meeting via a web browser, phone dial-in, or the Teams mobile app. The Teams Booking app allows the creation of Bookings calendars, assigning staff, and scheduling new and managing existing appointments without ever leaving Teams. |
| Website | https://www.microsoft.com/en-gb/microsoft-365/business/scheduling-and-booking-app |
| Data Residency / Privacy Information | The Teams booking app is hosted in the nhs.net tenant, with data stored in the O365 nhs.net environment. |
| Application Support | Core support for the Microsoft Bookings app is provided by Microsoft.
Local administrator guidance for setting up Virtual Visits and Bookings Calendars is provided here: https://support.nhs.net/knowledge-base/virtual-visits-and-microsoft-bookings-local-administrator-guide/#virtual-visits-use-case Guidance tailored towards users of Virtual Visits Booking Calendars is available here: https://support.nhs.net/knowledge-base/virtual-visits-user-guidance/ |
| Important Notes | User Provisioning: Provisioning of Bookings Calendars is required outside of the Teams Bookings App to ensure a consistent naming convention and an Exchange Online check before adding users to the Bookings Calendar. This can be done by local administrators in the NHSmail portal.
Licensing: No additional licensing cost. As users are migrated to Exchange Online. the Teams Bookings license will be enabled. |
