INTERWORKS EUROPE LIMITED

Dataiku

Dataiku is a Universal AI Platform for Orchestrating Enterprise AIs. Create, share, and reuse applications that leverage data and machine learning to extend and automate decision making. Scale AI effectively across all dimensions and deliver advanced analytics using the latest techniques at enterprise scale

Features

• Data preparation
• Data visualisation
• Machine Learning
• DataOps
• Healthcare MLOps
• Analytical Apps
• Collaboration
• Governance
• Explainable AI
• Flexible, hybrid Architecture

Benefits

• Easily build data pipelines to join & transform datasets
• Quick visual analysis of columns & categorical data
• User supported & guided use of ML
• Centralised Dataiku projects for all work and collaboration for users.
• Dataiku unified deployer manages project files’ movement between design nodes
• Easily create project dashboards and share them with business users.
• Visual flow is the canvas where teams collaborate on projects
• Dataiku permissions controls team permission at the project level
• Dataiku provides critical capabilities for explainable AI
• Dataiku can run on-premise or in the cloud

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at patrick.quarmby@interworks.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

330045384097037

Contact

Patrick Quarmby
07435629806
patrick.quarmby@interworks.co.uk

About the service

• Service categories:
  • Applications
    • Engineering
      • Other engineering
        • Building Information Modelling Applications
        • Electronic Design Automation Applications
        • Engineering Support Applications
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Hybrid cloud
• Service constraints: Cloud vendors supported: GCP, Azure, AWS Each cloud provider will have vendor-recommended hardware requirements (t2.large minimum for example) Software limited on which cloud data warehouses it can feed data to (Snowflake, Redshift, BigQuery, Synapse)
• System requirements: Modern browser (Chrome, Chromium, Firefox, Edge

User support

• Email or online ticketing support: Yes
• Support response times: Within 4 hours Mon - Fri 9am - 5pm 24/7 service is available on request at an additional cost depending on size of environment
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes
• Support levels: We provide office hours support desk service via email, phone and video conference. Support is provided free of charge for anything to do with ensuring that the software is working as it should. Support is only charged for work which would classify as consulting assistance - this is usually separately agreed with clients in advance. All accounts have an assigned account manager.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: InterWorks has a team of Dataiku accredited data engineers can perform initial setup of your Dataiku instance, configure data connections and outputs and set up some example models.
• Service documentation: Yes
• Documentation formats: HTML
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Via the Dataiku website
• End-of-contract data extraction: InterWorks has a team of Dataiku accredited data engineers can perform initial setup of your Dataiku instance, configure data connections and outputs and set up some example models.
• End-of-contract process: At the end of the contract the licences expire, users are no longer able to log in and access the service. After a short grace period, any data held is deleted.

Using the service

• Web browser interface: No
• Application to install: Yes
• Compatible operating systems:
  • Linux or Unix
  • Windows
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: As described here https://knowledge.dataiku.com/latest/code/apis/index.html
• API documentation: Yes
• API documentation formats: HTML
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Service is extendable, in that users are able to create and use custom drivers (for example custom SAP-drivers), custom APIs (through API Profile functionality). Use of custom scripting libraries (for example python libraries), installation of which requires admin-level access, is also permitted.

Scaling

• Independence of resources: Local installation & dedicated RAM/Access

Analytics

• Service usage metrics: No

Supplier type

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: Training, adoption, deployment, build/design pipelines/workflows etc

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Data Erasure
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Dataiku provides ability to make predictions (and explanations), results of which are then written to the database, or exported to flat file. Dataiku as a platform does not retain any user data.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • CSV
  • Other
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • Excel
  • Google sheets

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)

Availability and resilience

• Guaranteed availability: SLA are backed by and depend on the chosen public cloud provider, all three major cloud providers (AWS, Azure, GCP) guarangee at least 99.99% monthly uptime percentage, with service credit for any SLAs that are missed. For example if uptime drops to 99.00%
• Approach to resilience: Resilience is backed and provided by the underlying public cloud infrastructure (topology of which you manage in-house).
• Outage reporting: Alerting can be set up within individual cloud provider's environment, for example on AWS you are able to define alers through CloudWatch service, which can communicate outage in a any number of ways, including email, SMS, push etc depending on the cloud topology of your choice

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Other
• Other user authentication: SAML Kerberos Active Directory OpenID
• Access restrictions in management interfaces and support channels: Interfaces and support channels Management Interfaces and support channels are secured using roles applied to users to maintain the separation of ability of users. The system is designed to allow only specific and absolutely necessary users the ability to alter authentication and authorisation. Default permission for new users is always set to deny all access until it is specifically granted by and administrative account
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Software Security Code of Practice: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: Data Security is taken very seriously, Dataiku as organisation are working toward SOC and ISO 27001 compliance and have an internal security governance policy, but this is not currently one that is accredited to an external standard. We have never had a security incident or breach.
• Information security policies and processes: We have a detailed IT Policy (Security and Internet) which we can make available on demand. The key points of which are: Roles and responsibilities - the policies are established, monitored and breaches investigated by the directors, but at a core level everyone has a responsibility for security. Monitoring - we reserve the right to monitor employee use of IT resources, tracking and remote wipe software is installed on all devices Damage and loss - defined actions in the event of damage or loss of equipment Misuse and vandalism Specific guidelines concerning encryption and security admin policies of portable devices, memory sticks, mobile phones, laptops, AV software, email attachments, commitments in emails, IM systems, licensing of software, and password policies.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: At platform level -- release notes for each major version of Dataiku will list major fixes and general changes to the system since last release. All jobs that Dataiku generates to orchestrate data movement from source system to target data warehouse are tracked server-side, with job versioning system built in (both in-house built system as well as open-source git integration available)
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: AWS (as well as other cloud providers eg GCP and Azure) have a built in vulnerability testing process which allows the on-demand testing of an VM instance (that we control / have access to).
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Amazon Web Services (as well as other major cloud providers) provide assurance that they take responsibility for identifying potential compromises and alert users on discovery. Response times for such incidents are managed by the underlying cloud provider's team.
• Incident management type: Supplier-defined controls
• Post-quantum cryptography secure: Yes
• Incident management approach: User reported incidents go to our support desk for triage. If the support desk cannot resolve it immediately it is escalated to the correct specialist within the team. Incidents discovered by our team would be notified directly to the client. Minor issues would usually be resolved then alerted. Major issues would be alerted first and then the focus would move on to resolution. Incidents are reported via email

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: https://pages.dataiku.com/free-trial
• Link to free trial: https://pages.dataiku.com/free-trial

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 5%
• Between £500,001 and £1,000,000: 7%
• Between £1,000,001 and £2,500,000: 7%
• Between £2,500,001 and £5,000,000: 7%
• Over £5,000,001: 10%

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: 7b97c251-7e3e-4769-a40e-d1b006c7233f
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: No

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

  • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
  • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
  • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
  • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
  • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors

  Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

  • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges

  Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

  • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
  • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
• Mission: Make Britain a clean energy superpower:

  To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

  Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

  • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
  • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
• Mission: Break down barriers to opportunity:

  By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

  Policy Outcome 6: Employment and training: For those who face barriers to employment

  • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at patrick.quarmby@interworks.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.