THROUGH TECHNOLOGY LIMITED

Archive360 - Digital Archiving & Data Governance

Archive2Azure provides an elastic and efficient cloud-based archive ensuring fast, secure, and compliant access, validation and classification, retention, and disposition. Supporting any data type from any application platform or e-comms solution and enabling effective AI Data Readiness.

Features

• Infinitely scalable secure data archiving, retention & disposition.
• Archive any data in its native format
• Archive from multiple applications, filestores and cloud platforms
• Cost effective use of tiered storage
• Hosted in a secure dedicated Azure subscription
• Fully configurable retention policies and disposition
• Granular access control with logging of all access per item
• Ingest via API, Dropzone or direct database or filestore connection
• A single source of governed AI-Ready data.
• E-Discovery & Legal Hold

Benefits

• Implement or simplify data retention and disposition/disposal
• Simplify responses to Freedom of Information and Subject Access Requests
• Enable the retirement of legacy applications while retaining data
• Create an archive data resource for AI interrogation and analytics
• Compliant with GDPR, DPA, NCSC guidance and other applicable standards

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at enquiries@throughtechnology.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

339269061765508

Contact

Peter Hanney
+44(0)7412 683710
enquiries@throughtechnology.uk

About your service

• Service categories:

  Application Development and Deployment

  Data management

  Data integration and intelligence

  • Data Ingestion and Transformation Software
  • Master Data Intelligence Software
  • Data Archiving and Information LifD-Cycle Management
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Hybrid cloud
• Service constraints: The service is hosted in a dedicated Microsoft Azure Subscription and uses Azure Platform as a Service functions. Azure administration can be provided with this service or undertaken by the customer as required.
• System requirements:
  • Archive2Azure uses native Azure Services (estimates provided on quotation)
  • Users require access via the internet or customer-owned ExpressRoute connection.
  • Users require a modern browser to access the portal

User support

• Email or online ticketing support: Yes
• Support response times: 4 business hours
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Yes
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: WCAG 2.2 A
• Web chat accessibility testing: We typically utilise Microsoft Teams federation with customers or the customer's own ITSM tooling. Microsoft tools comply with the above accessibility standard.
• Onsite support: Yes, at extra cost
• Support levels: Through Technology provide support and implementation for Archive360 products through our Lot 3 - Cloud Support service: "Cloud Archiving Service, Powered by Archive360".; ; Support levels are best determined in response to your requirements as a customer and the nature, criticality and rate of change in the data your will store. For this reason we address support requirements as part of the quotation/ordering process. Depending on your requirement, support hours and response times may vary from those shown above.
• Support available to third parties: Yes
• AI chatbot: No

Onboarding and offboarding

• Getting started: Please get in touch with us for an initial consultation regarding the data types, volumes and sources for archive. From this we can arrange a quotation, considering the optimum method for ingesting data and onboarding users to the service.; ; Our team will create an instance of the Archive2Azure service in a dedicated Azure subscription for you and provide training for nominated administrative points of contact in your organisation along with system documentation and user guidance. We can also setup and operate the archive for you as a managed service if required, where Through Technology will manage the Azure subscription and (if required) the full archive service.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • ODF
  • PDF
  • Other
• Other documentation formats: Microsoft Document Formats
• End-of-contract data extraction: Data is stored in its native format in Azure Blob Storage in a dedicated subscription within a customer-owned Azure enrolment. The data is encrypted with the customer's keys. This means that the data is always under the customers control and does not require extraction. At the end of the contract, the customer still owns the Azure storage and all the data within, which remains in its native format. Extraction to an alternate location can be arranged with our engineers based upon our ratecard, but this is not typically necessary where the data is always in a customer-owned storage medium and subject to customer control. This is a key difference between our service and competitor products, please contact us to discuss in further detail.
• End-of-contract process: Archive2Azure services will be removed from the customer Azure subscription. Leaving the data within the customer's subscription in its native format. Should customers require data to be moved to alternate locations, this can be done by the customer prior to contract end, after contract end using standard tools for Azure data transfer or by our engineers based upon our Lot3 Support Rate Card during the contract exit. Any additional customer adminsitrative users are added and our AzureAD permissions to access the Archive and underlying Azure Services are revoked.; ; We will discuss any specific end of contract requirements as part of our initial consultation and quotation.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Documentation is provided in the customers chosen formats and is accessibility tested using Microsoft proofing tools. Large font and high contract versions are available.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: WCAG 2.2 A
• API: Yes
• What users can and can't do using the API: The API API can be used for any number of integration and archiving scenarios. Please contact us to discuss as this requires more than the 200 words available to us in this service description on Digital Marketplace.
• API documentation: Yes
• API documentation formats:
  • HTML
  • ODF
  • PDF
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Retention and disposition policies and their associated workflows can be customised to meet any record retention requirements at a very granular level. Role-based access control can be configured at a granular level to control who has access to view and search different data sets or types. Archive2Azure is an immensely powerful and flexible archiving tool so we strongly recommend asking us specific clarifications or booking a demonstration, as it cannot be adequately covered in the 200-word limit for a this question in a G-Cloud Application.

Scaling

• Independence of resources: The solution is implemented in a dedicated subscription within the customer's Azure environment. This maintains customer control over the data whilst providing total segregation between Archive360 customers and from the customer's other services. The solution is therefore totally independent of any other customer's instance and massively scaleable due to use of native Azure Services. Multiple existing customers archive multiple petabytes.; ; Ingestion and user access operate on separate infrastructure, limiting any impact from resource intensive processing activity.

Analytics

• Service usage metrics: Yes
• Metrics types: Standard Azure Monitoring and metrics.; Comprehensive data on Archive consumption, data types etc.; Any metrics possible through the powerful search and analytics available in the console (demo recommended).
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: No

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Archive360

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
  • Other
• Other data at rest protection approach: Data is stored within a dedicated customer Azure subscription which can be IT Health Check tested to validate security controls.
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: Data can be exported in its original format to its source location or a range of other storage platforms from the admin console. Exports can be generated from ediscovery making responses to security investigation, Freedom of Information and Subject Access Requests straightforward. Search and Export functions are subject to role-based access control.; Certain data sources (such as Office 365) include features to seamlessly re-inject data into the user's account retaining original metadata and folder structures.; For security investigation, Freedom of Information and Subject Access Requests, appropriately authorised users can restore Office365 data into separate folders in a chosen account.
• Data export formats:
  • CSV
  • ODF
  • Other
• Other data export formats: Data is exported in its native format
• Data import formats:
  • CSV
  • ODF
  • Other
• Other data import formats: Data is stored and imported in any file format

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Other
• Other protection within supplier network: Strong security architecture with network segmentation and WAF configuration and active protective monitoring.

Availability and resilience

• Guaranteed availability: See Microsoft Azure service descriptions. Archive360 support SLAs and service hours will be agreed on an individual customer basis based upon the nature and criticality of each data type. We balance resilience requirements with Azure resource cost to deliver an optimal solution.
• Approach to resilience: Our service utilises Microsoft Azure resilience features and capabilities to provide a robust service to customers. There is an obvious trade-off between the level of Azure resilience and replication applied and cost.; We therefore work with our customers to determine the best fit for your data, based upon criticality and access requirements as well as a traditional RTO/RPO. Further details upon request.
• Outage reporting: Service outage reporting is available via dashboards and alerting.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: Access to the service is managed through the Customer's Azure AD with entitlements used to provide access management for administrative functions. This is defined on a per customer basis following principles of least privilege. All admin permissions are assigned on a least privilege basis. All resources are appropriately security vetted and subject to regular account-specific security briefings. More information available upon request.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: We work closely with our customers and align to their security policies and processes, where necessary, these are supplemented by our own ISO27001 certified Information Security Management System.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Through Technology work either following customer config and change management processes or using our own ISO9001/ISO27001 certified approach. All changes are thoroughly tested and assessed for funcitonal/performance/training/security impact.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Archvie360 provides Software as a Service based upon Microsoft Azure, we inherit Azure's updating of both our Microsoft Azure Application and Azure Services: such as CosmosDB. For on-premise Fast Collect Migration Server, this is the Customer's OS to patch. Archive360 supplies patches as it relates to the relative code. Archive2Azure relies on Azure Application, CosmosDB, Search -- respective SLAs, in particular updates, are at https://azure.microsoft.com/en-us/support/legal/sla/ .; ; For managed services, subscriptions are managed with Microsoft Security Center and the 3rd party tools from Qualys. As part of that managed service, Archive360 leverages Qualys Application Vulnerability; scans.
• Protective monitoring type: Undisclosed
• Protective monitoring approach: Protective Monitoring requirements, integration and options will be discussed as part of our initial engagement. We can provide a SIEM capability specifically for the service or integrate with the Buyer's existing SIEM solution
• Incident management type: Supplier-defined controls
• Incident management approach: For Archive360 software related incidents - All defects are tracked via Archive360 Zendesk, auto-generate Jira tickets, Tickets are auto-assigned to respective Section Manager, updated with notifications to Zendesk. We have assigned Scrum Master for monitoring Dev, and assigned Service Manager for monitoring Customer tickets all the way from defect resolution, QA test, documentation and release notes, and arrangement with Customer for deployment.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: British Standards Institute (BSI)
• ISO/IEC 27001 accreditation date: Sunday 13 October 2024
• What the ISO/IEC 27001 doesn’t cover: Nothing it covers the entire scope of our organisation and operations.
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: British Standards Institute (BSI)
• ISO 9001 accreditation date: Tuesday 9 April 2024
• What the ISO 9001 doesn’t cover: Nothing it covers the entire scope of our organisation and operations.
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 76dde77e-4cc5-4873-9ef7-1c90b8bd978c
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: E694fc21-4ff5-4f69-a7b6-d3e6ece0bef0
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Ensuring new workers are informed of their right to join a trade union
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
    • Delivery of training schemes and programmes to address any identified skills gaps and under-representation in the workforce for the contract (e.g. prison leavers, care leavers, kinship carers, disabled people)
    • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Understanding of the issues affecting the development of new skills by target cohort
    • Understanding of the underlying factors affecting improvements to reduce barriers to entry and training schemes for the target cohort(s) related to the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at enquiries@throughtechnology.uk. Tell them what format you need. It will help if you say what assistive technology you use.