Skip to main content

Beta Help us improve the Digital Marketplace - send your feedback

Bytes Software Services

Commvault Cloud Powered by Metallic AI

Commvault provide a cyber resilience platform built for the hybrid enterprise. Commvault Cloud delivers true cloud cyber resilience while ensuring the fastest recovery and we protect more workloads than anyone else. bssgc

Features

  • Backup and Recovery for Microsoft Office 365 suite and eDiscovery.
  • Backup and Revovery for Virtual Servers.
  • Backup and Recovery for File & Object Storage
  • Backup and Recovery for Endpoints including E-Discovery
  • Backup and Recovery for Databases.
  • Backup for Microsoft Dynamics 365..
  • Salesforce Backup, safeguard production and sandbox Salesforce environments.
  • Metallic & Commvault customers get fully-managed cloud storage
  • Air Gap, Secondary backup copies foolowing NCSC principles
  • Backup and Recovery for Kubernetes.

Benefits

  • O365 Suite (Exchange, Teams, Onedrive, Sharepoint) data protection, including ransomware.
  • Hybrid cloud data protection for Hyper-V, VMware, AzureVM, VMC, AVS.
  • File & Object data protection for Windows, Linux, Azure Blob.
  • Endpoint data protection with 1-click backup and recovery with E-Discovery.
  • Database data Protection for Oracle, HANA, SQL databases and AD.
  • Comprehensively protect your CRM data.
  • Industry-proven backup and recovery
  • Cloud Storage for the broadest set of workloads
  • Simplify your cloud data management with pre-configured networking and storage
  • Mitigate ransomware with secure air-gapped cloud data protection.

Pricing

£0.01 a user a month

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@bytes.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

1 3 9 0 0 6 2 4 8 2 5 9 5 5 9

Contact

Bytes Software Services Chris Swani
Telephone: +44 (0) 7951 326815
Email: tenders@bytes.co.uk

Service scope

Software add-on or extension
No
Cloud deployment model
  • Public cloud
  • Private cloud
  • Hybrid cloud
Service constraints
No
System requirements
  • Network Connectivity & Bandwidth availability
  • Network Gateway Server

User support

Email or online ticketing support
Email or online ticketing
Support response times
Support including questions is targetted between 1 hour for critical severity to 24 hours for Low severity
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
WCAG 2.1 A
Phone support
Yes
Phone support availability
24 hours, 7 days a week
Web chat support
Web chat
Web chat support availability
9 to 5 (UK time), Monday to Friday
Web chat support accessibility standard
WCAG 2.1 A
Web chat accessibility testing
N/a
Onsite support
Yes, at extra cost
Support levels
Support is included within the SaaS cost, with the following Targetted Response times

Critical Severity - 1 Hour
High Severity - 2 Hours
Medium Severity - 4 Hours
Low Severity - 24 Hours
Support available to third parties
No

Onboarding and offboarding

Getting started
Commvault offer comprehensive product training and accreditations, delivered both onsite and remotely. Access is made available to Commvault's free online self paced training as well as the commvault doccumentation
Service documentation
Yes
Documentation formats
  • HTML
  • PDF
  • Other
Other documentation formats
  • DOCX
  • PPTX
End-of-contract data extraction
A variety of reports are available
End-of-contract process
At the end of the contract the Services are terminated preventing any further backups and recovery from the service...Where Storage has been selected as part of the service, all data will be removed from the storage service within 30 days of the temination date,

Using the service

Web browser interface
Yes
Supported browsers
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
Application to install
No
Designed for use on mobile devices
No
Service interface
Yes
User support accessibility
None or don’t know
Description of service interface
Commvault provides an HTML frontend called Command Center which is supported on a number of different web browsers.
Accessibility standards
WCAG 2.1 A
Accessibility testing
N/a
API
Yes
What users can and can't do using the API
Commvault REST APIs represent operations that are performed in the CommCell Console. This is implemented on HTTP protocol for common programming language & tools. REST API also available for Datto so can be used for reporting
API documentation
Yes
API documentation formats
  • Open API (also known as Swagger)
  • HTML
API sandbox or test environment
Yes
Customisation available
No

Scaling

Independence of resources
Every user is provided with unlimited storage

Analytics

Service usage metrics
Yes
Metrics types
Consumption metrics are provided detailing peak daily, and monthly usage.
Job completion
SLA Met
Reporting types
  • API access
  • Real-time dashboards
  • Regular reports

Resellers

Supplier type
Reseller (no extras)
Organisation whose services are being resold
Organisation whose services are being resold

Staff security

Staff security clearance
Conforms to BS7858:2019
Government security clearance
Up to Security Clearance (SC)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
United Kingdom
User control over data storage and processing locations
Yes
Datacentre security standards
Managed by a third party
Penetration testing frequency
At least once a year
Penetration testing approach
Another external penetration testing organisation
Protecting data at rest
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
Data sanitisation process
No
Equipment disposal approach
A third-party destruction service

Data importing and exporting

Data export approach
A variety of reports are available
Data export formats
Other
Other data export formats
  • PDF
  • PPTX
Data import formats
CSV

Data-in-transit protection

Data protection between buyer and supplier networks
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
Data protection within supplier network
TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability
Service Credits of 10% are offered for less than 99.9% availability, and 25% Services Credits is offered for less that 99% availability
Approach to resilience
The Commvault Metallic Service is hosted in Microsoft Datacentres on Azure infrastructure and the physical security is provided by Microsoft.
The following information is supplied by Microsoft and the full document can be accessed here https://docs.microsoft.com/en-us/azure/security/fundamentals/physical-security

Microsoft designs, builds, and operates datacentres in a way that strictly controls physical access to the areas where your data is stored. Microsoft understands the importance of protecting your data and is committed to helping secure the datacentres that contain your data. We have an entire division at Microsoft devoted to designing, building, and operating the physical facilities supporting Azure. This team is invested in maintaining state-of-the-art physical security.

Azure keeps your data durable in two locations. You can choose the location of the backup site. In both locations, Azure constantly maintains three healthy replicas of your data.
Database availability
Azure ensures that a database is internet accessible through an internet gateway with sustained database availability. Monitoring assesses the health and state of the active databases at five-minute time intervals.
Outage reporting
Outages are communicated through the HTML Interface dashboard.

Identity and authentication

User authentication needed
Yes
User authentication
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
Access restrictions in management interfaces and support channels
Role Based Access Control, Multi-Factor Authentication, and FIPS 140-2 certified tokens for MFA.
Access restriction testing frequency
At least once a year
Management access authentication
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)

Audit information for users

Access to user activity audit information
No audit information available
Access to supplier activity audit information
No audit information available
How long system logs are stored for
User-defined

Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
N/a
ISO/IEC 27001 accreditation date
N/a
What the ISO/IEC 27001 doesn’t cover
N/a
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Cyber essentials
No
Cyber essentials plus
No
Other security certifications
Yes
Any other security certifications
  • CSA
  • ISO/IEC 27001:2013
  • SOC 2 Type II
  • FedRAMP High Compliant
  • FIPS 140-2
  • GDPR
  • HIPAA

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
Other
Other security governance standards
1. CSA
2. ISO/IEC 27001:2013
3. SOC 2 Type II
4. FedRAMP High Compliant
5. FIPS 140-2
6. GDPR
7. HIPAA
https://metallic.io/trust
Information security policies and processes
Security threat detection and response, zero trust authentication, zero trust access, virtual air-gap, immutability.
https://metallic.io/trust

Operational security

Configuration and change management standard
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Configuration and change management approach
At a minimum, the change control process includes the following steps:
• All requests are logged
• Undergoes a preliminary review and is appropriately prioritized
• Authorized by appropriate personnel
• Requirements to implement the change are identified and analyzed
• Dependencies resulting from the change are identified
• Impact analysis to the current environment or business units assessed
• Change approach is identified and reviewed
• Change is tested in a controlled environment
• Acceptance of the change tested and approved
• Implementation and release of the change into production
• Change process from initiation to post-implementation is documented
Vulnerability management type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Vulnerability management approach
Any vulnerability or threat detected through automated or manual scans must be remediated within the timeframes specified below:
Critical - A week from detection date. If vulnerability is detected on a critical server/device, it should be remediated within 24- 48 hours.
High - Within 2 weeks from Within a week if it is a Page Information Technology Vulnerability Management Policy 3 detection date critical server/device.
Medium - Condition based remediation Medium vulnerabilities are not required to be remediated immediately. However, Information Security Team may upgrade the Severity level of vulnerability to High as necessary to ensure appropriate action is taken.
Protective monitoring type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Protective monitoring approach
Cloud Alerts are standard Commvault Alerts that syncs to cloud.comvault.com. The Cloud Alert feature is the framework for the Event Monitoring service. Cloud Alerts for event monitoring are based around the following purposes:

• Detect when Commvault is operating outside of the normal based on historic data and smart algorithms.
• Detect anomalies using machine learning/AI based code integrated into Commvault’s core.
• Detect thresholds, conditions and standard events that occur within Commvault.
• Detect CommCell events or exceeded thresholds
• Detect parameter and configuration changes in the Commvault software and its protected data
Incident management type
Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
Incident management approach
Commvault’s Incident Response Plan includes the following processes:

• To protect information and information systems.
• To provide reporting incidents step-by-step.
• To detect attacks or intrusions.
• Restoration process to mitigate the effects of incidents and services.

Every incident is different, our guidelines are flexible and unique shaped by the incident. Our IRP documents information about responding to incidents that can be used regardless of hardware platform or operating system. It describes the five stages of incident handling, with the focus on preparation, follow-up, including reporting guidelines and requirements with defined roles and responsibilities

Secure development

Approach to secure software development best practice
Conforms to a recognised standard, but self-assessed

Public sector networks

Connection to public sector networks
No

Social Value

Social Value

Social Value

Fighting climate change

Fighting climate change

We take our environmental management and the impact we have on the environment very seriously. We have environmental policies in place and hold the ISO14001 accreditation. Our environmental assessments are conducted annually by an external Lead ESOS Assessor; they are signed-off by the board and compliance reported to the regulator (the Environment Agency). Our environmental policy is published on our website at https://www.bytes.co.uk/company/sustainability/environmental.
Bytes achieved carbon net zero in March 2022 through approved carbon offsetting schemes. We are always seeking to reduce our impact on the environment. We aim to minimise waste, reduce pollutants and use renewable materials. Our offices have recycling facilities for cans, plastic and paper. We aim to reduce our office printing to zero within the next few years.
An Environmental Steering Committee has been established to coordinate environmental activities and drive change.
To drastically reduce our emissions, we have switched to renewable energy. Our Head Office has reached our first milestone of using a specialist 100% renewable electricity provider. We are also exploring options to install solar panels on our Headquarters building.
Other environmental initiatives include installing electric vehicle charging points and encouraging staff to commute to work without the car (setting up a car share network and installing secure cycle parking).
We produce a SECR (Streamlined Energy and Carbon Reporting) report that details the companies energy consumption and carbon emissions. This report is produced annually by an independent assessor.
This report provides details of our emissions in Scope 1, 2 and 3 categories. It details the activities previously taken to reduce emissions and also recommendations for further improvements.
For scope 1,2 and 3 emissions we aim to reduce these by 50% by 2025-2026 from our 2021 baseline.
We aim to be Net Zero by 2040, covering our own operational emissions.

Pricing

Price
£0.01 a user a month
Discount for educational organisations
No
Free trial available
Yes
Description of free trial
Commvault Cloud offers a Free of Charge 30 day, 1TB Licence that can be leveraged of any of the Commvault Cloud SaaS Backup and Recovery service offerings.
Link to free trial
https://www.commvault.com/free-trial

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@bytes.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.