NG-IT LTD

Wasabi S3 Hot Cloud Storage

Hot Cloud Storage is simple, fast, and affordable cloud object storage. There are no archival or warm storage tiers to deal with–it’s just one tier of highly secure, low-latency storage that’s as fast or faster than the hyperscalers’ most expensive frequent-access tiers.

Features

• S3-Compatible, enabling use with existing S3-based tools, SDKs, and workflows.
• Object Lock (WORM)
• Encryption at Rest and In Transit
• Provides 11×9s (99.999999999%) durability using replication and data integrity checks
• High Availability & Hot Storage Data delivered with “hot” performance.
• Bucket Versioning Support
• Lifecycle Policies
• Multipart and parallel uploads for high throughput and efficient transfer
• Strong Consistency Model
• Audit Logging & Monitoring Integrations

Benefits

• Simple pricing model with no tiers—typically far cheaper than hyperscalers.
• No Egress Fees
• No API Request Charges
• High Performance (Hot Storage)
• Strong Security Features
• S3-Compatible API
• High Durability & Reliability
• Ransomware Protection
• Easy Integration with Backup & Archiving Solutions
• Globally Distributed Regions Multiple data centres across regions

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at gcloud@ng-it.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

225971414129515

Contact

Operations Team
0330 223 3915
gcloud@ng-it.co.uk

About your service

• Service categories:

  Systems Infrastructure Software

  Storage

  Data replication and protection

  • Data Protection Software
  • Backup and Recovery Reporting Software
  • Storage Replication Software
  • Host or Hypervisor-Based Replication Software
  • Systems and Data Migration Software
  • Fabric and Appliance-Based Replication Software
  • Array-Based Replication Software
  • Replication Management Software

  Archiving

  • Email Archiving Software
  • File and Other Archiving Software
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud
• Service constraints: None
• System requirements: None

User support

• Email or online ticketing support: Yes
• Support response times: Wasabi offers a support matrix depending on the severity of the incoming ticket. Severity 1 incidents will be responded to within 15 minutes. Severity 2 within 30 minutes, severity 3 within 4 hours and severity 4 within 10 business days. All severities have a sliding scale of resolution times.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: No
• Support levels: Wasabi offers Basic (free) & Premium (paid) support plans as shown below:; • Basic Support: Business day support via email only; • Premium Support hours = 7 x 24 x 365 via email & phone. Premium support is 7% of the purchase price for Reserved Capacity Storage customers.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Wasabi is a cloud storage IaaS, online help guides and tutorials are accessible by end customers. As part of our partner relationship Wasabi will help enable partner teams to be able to onboard new customers as part of their cloud service offering – this is by the online help and tutorials as well as partner-specific educational content provided via the Wasabi Partner Portal. Additionally, Wasabi also works closely with it’s partner network and utilises in-region Wasabi Sales Engineers to provide more in depth partner training and enablement.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: At the end of a contract, stored data will be available for 30 days, with the ability to extend if necessary. This will enable the customer to either retrieve their data or renew their contract without service interruption. Users will usually extract their data via the same application they used to push data to Wasabi.
• End-of-contract process: Pursuant to section 1.5 ""Your Content"" of the Customer Agreement, "" 'Your Content' means content that you or any Authorized User transfers to us for storage or hosting by the Wasabi Service in connection with your Customer Account. Your Content does not include your Customer Account information. You will ensure that Your Content does not violate any terms of this Agreement, the Documentation, or any applicable law. You are solely responsible for the development, content, operation, maintenance, and use of Your Content. You represent and warrant to us that: (a) you or your licensors own all right, title, and interest in and to Your Content and Feedback; (b) you have all rights in Your Content and Feedback necessary to grant the rights contemplated by this Agreement.""; ; At the end of a contract, stored data will be available for 30 days, with the ability to extend if necessary. This will enable the customer to either retrieve their data or renew their contract without service interruption.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Other
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Integrated GUI for all data management and functionality and service based ticketing functionality
• Accessibility standards: None or don’t know
• Description of accessibility: Integrated GUI for all data management and functionality and service based ticketing functionality
• Accessibility testing: None
• API: Yes
• What users can and can't do using the API: Wasabi provides 3 distinct APIs:; • Wasabi S3 API - Wasabi’s object storage service is built to be 100% bit-compatible with the Amazon Web Services’ Simple Storage Service (AWS S3) and Identity and Access Management (AWS IAM) APIs. https://docs.wasabi.com/docs/wasabi-api ; • Wasabi Account Control API - At a high level, WACA allows for the following functions:; o Create a new sub-account that is linked to the Wasabi Control Account; o Generate AWS key sets for sub-accounts; o Manage sub-account trial parameters, such as extending the sub-account trial period and change subaccount trial quotas; o Convert a sub-account trial period into a full (paying) account; o Query utilization of sub-accounts both at the summary account level and bucket level; o Query invoices of sub-accounts; o Delete sub-accounts; o Manage account “profile” information, such as email address; https://docs.wasabi.com/docs/account-control-api ; • WACM Connect API - At a high level, the WACM Connect allows for the following functions:; o Query utilization of sub-accounts at the account level and bucket level; o Query invoices of sub-accounts; o Query current utilization of control accounts; o Filter the responses with a wide range of parameters; https://docs.wasabi.com/docs/wacm-connect-api
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: No
• Customisation available: No

Scaling

• Independence of resources: Please refer to the following Wasabi Knowledge Base article(s): ; ; https://knowledgebase.wasabi.com/hc/en-us/articles/360031983432-How-does-Wasabi-protect-against-malicious-encryption-; ; Customer data is encrypted on upload and can only be access by authorized customer users with valid access keys. Customers are responsible for creating and managing their users and access keys, as Wasabi is not able to access the customer account to configure these settings. Please refer to:; ; https://docs.wasabi.com/docs/access-keys-1; https://docs.wasabi.com/docs/users-1

Analytics

• Service usage metrics: Yes
• Metrics types: Storage consumption (active and deleted), API calls, utilisation
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Wasabi Hot Cloud Storage. WACM

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data importing and exporting

• Data export approach: Data can be downloaded at any stage through the API's or GUI
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: Other
• Other protection between networks: N/A
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Please refer to https://wasabi.com/legal/sla/
• Approach to resilience: Wasabi provides 11 9's of data durability. Please see the attached "data durability" whitepaper. Other information can be made available on request.
• Outage reporting: A realtime dashboard is available at: https://status.wasabi.com/ it is also possible to subscribe to email updates

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Wasabi is a cloud storage IaaS. User authentication is the same across the platform.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Wasabi has a Chief Information Security Officer, Security Officer, and IT Security Officer. Please contact compliance@wasabi.com if there is a need to contact one or more of these individuals; ; Please refer to the following attached policy summaries: ; ; Access Control and Access Review.pdf; Compliance & Regulatory Audit Procedure.pdf; Risk Assessment.pdf; Security Assessment.pdf; Data Retention and Destrcution.pdf
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Wasabi Operations department track the status, location, and configuraiton of service comonents throughout their lifetime. ; ; Please refer to the following attached policy summaries: ; ; Maintenance.pdf; Security.pdf; Software Development Lifecycle - SDLC.pdf; Service Notification.pdf
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Wasabi conducts weekly vulnerability scanning of all servers utilizing Tenable.IO. For an update schedule and status page please use the following link:https://wasabi-support.zendesk.com/hc/en-us/articles/115001406711-How-do-I-find-out-when-Wasabi-performs-service-updates- Wasabi is a URL/Website based application patching occurs as needed and can be comepleted seemlessly without interuption of service. Please refer to attached summary policy, "Maintenance", Service Notifications", and "Cybersecurity Incident Response" PDFs.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Wasabi utilises Carbon Black as its EDR/AV, which is continuously monitored and action is taken when there is an update. Furthermore, Wasabi has implemented a process where upon stakeholders are notified via, text, email or Slack in the event of unauthorized access. At which point action is taken to block said IP from unauthorized access.
• Incident management type: Supplier-defined controls
• Incident management approach: Please refer to Summary Policy PDF, "Cybersecurity Incident Response.pdf," for further detail on this matter.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: Yes - 1TB for 30 days
• Link to free trial: https://wasabi.com/try-free

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 10%
• Between £250,000 and £500,000: 22%
• Between £500,001 and £1,000,000: 30%
• Between £1,000,001 and £2,500,000: 30%
• Between £2,500,001 and £5,000,000: 30%
• Over £5,000,001: 30%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: CDL Group
• ISO 9001 accreditation date: Tuesday 1 July 2025
• What the ISO 9001 doesn’t cover: N/a
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: E29042f9-0029-4a93-840f-4178125bdd61
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 76366978-ee23-40f3-80dd-8b48234414fd
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Volunteering opportunities for staff
    • Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
    • Measures for making facilities used in the delivery of the contract available for community groups, education or training
    • Measures to engage users and communities and build relationships to increase community integration build trust and influence how the contract is delivered
    • Support for community-led initiatives relevant to the contract. Illustrative examples: improving transport links; reducing loneliness; helping with English language proficiency; and facilitating social mixing among people with different backgrounds

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Delivery of training schemes and programmes to address any identified skills gaps and under-representation in the workforce for the contract (e.g. prison leavers, care leavers, kinship carers, disabled people)
    • Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition
    • Working conditions which promote an inclusive working environment and promote retention and progression
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
    • Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Other measures to offer development opportunities for the target cohort(s) in the contract workforce
    • Creation of outreach activities to create a pipeline of employees for the future contract delivery

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at gcloud@ng-it.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.