LIFEBIT BIOTECH LIMITED

AWS IaaS Storage

Lifebit is an experienced AWS reseller for all AWS services, including DTRC and OGVA.
Lifebit brings extensive biomedical experience to pair provisioning of cloud with advice and guidance of biomedical data environments.

Features

• AWS IaaS and PaaS provisioning via approved UK government reseller
• Secure deployment within UK-approved AWS regions
• Cloud architectures designed for sensitive biomedical data workloads
• Elastic compute and storage scaling using native AWS services
• GPU-enabled infrastructure for high-performance analytics workloads
• Cloud-native networking, identity, and access management configuration
• Encryption at rest and in transit using AWS-managed security services
• Cost monitoring and spend controls using AWS-native tooling
• Support for containerised and managed platform services
• Advisory support aligned to biomedical research and data governance needs

Benefits

• Procure AWS cloud services at list price via simplified contracting
• Deploy secure, compliant cloud infrastructure for sensitive datasets
• Scale infrastructure on demand without upfront capital investment
• Accelerate research and analytics using high-performance cloud resources
• Reduce security risk using architectures aligned to public sector requirements
• Optimise cloud spend using transparent usage monitoring and controls
• Access specialist biomedical cloud expertise alongside infrastructure delivery
• Improve reliability and resilience using AWS managed platform services
• Maintain full control of data within customer-owned cloud environments
• Enable faster time to value using proven cloud architectures

• Education pricing available
• Free trial available

Service documents

• Pricing document

  ODT

• Service definition document

  PDF

• Terms and conditions

  ODT

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at procurement@lifebit.ai. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

141502796073237

Contact

Thorben Seeger
+ 44 7857149052
procurement@lifebit.ai

About your service

• Service categories:

  IaaS

  IaaS Storage

  • Object or Bucket
  • Block
  • File

Service scope

• Service constraints: The service is delivered through customer-owned AWS cloud environments and is subject to AWS service availability, regional coverage, service limits, and pricing structures. Customers must comply with AWS terms, security controls, and data residency requirements. Availability of specific instance types or services may vary by region. Support is provided remotely. Lifebit does not control AWS platform outages or changes to AWS services. Any optional advisory or managed support is agreed at call-off and does not replace AWS-native management capabilities.
• System requirements:
  • Active AWS account owned and managed by the buyer
  • Valid AWS billing account and payment method configured
  • Supported web browser for AWS Management Console access
  • Secure internet connectivity to access AWS services
  • Appropriate AWS Identity and Access Management (IAM) permissions
  • Compliance with AWS shared responsibility security model
  • Approved AWS regions selected by the buyer
  • Buyer-managed operating system licensing where applicable
  • Antivirus and endpoint protection for customer-managed virtual machines
  • Network configuration allowing access to AWS APIs and services
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud

User support

• Email or online ticketing support: Yes
• Support response times: Core business hours are 09:00 to 18:00. ; Lifebit will categorise the severity of an issue based on the impact statement provided by the client in the Help Desk ticket.; Lifebit engineering operates over two week sprints. For high and medium priority tickets it is expected that the majority of issues will follow the sprint process and further, will be subject to the Client release process. Timing is therefore variable and subject to change.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: No
• Support levels: The cost of support is included in the license.; Support levels: Major Incidents entailing total loss of service the response is 2 business hours. High priority incidents impacting one of more features for a small % of the overall users of the system the response time is 4 business days. Medium Priority Incidents cover any other issues and malfunctions the response time is 4 business days.; Lifebit provides provides a technical account manager and cloud support engineer.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Lifebit supports users to get started through a structured onboarding and enablement approach tailored to customer requirements. This includes guidance on AWS account setup, billing configuration, security baseline alignment, and selection of appropriate cloud services to support biomedical and data-intensive workloads.; ; Users are provided with onboarding documentation covering recommended architectures, access management, cost controls, and operational best practices. Lifebit offers online training sessions, walkthroughs, and knowledge-transfer workshops to help users understand how to provision, manage, and optimise AWS infrastructure safely and efficiently.; ; Where required, Lifebit can provide hands-on support during initial setup, including environment validation, identity and access configuration, and integration with existing organisational processes. Ongoing user-requestable support sessions are available to address questions, provide operational guidance, and support evolving requirements.; ; Training and support can be delivered remotely, with optional onsite sessions available by agreement. This approach ensures users are able to adopt and operate cloud infrastructure confidently while retaining full control of their AWS environment.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: All service user data remains within the customer’s own AWS cloud environment throughout the contract. As a result, no data extraction or migration is required at contract end.; ; Users retain full, uninterrupted access to their data, resources, and configurations using standard AWS tools and services, such as the AWS Management Console, APIs, and command-line interfaces. Data can be copied, exported, archived, or deleted using native AWS mechanisms in accordance with the customer’s policies and governance requirements.; ; On request, Lifebit can provide guidance on validating access, exporting data, or decommissioning resources as part of an orderly exit. Lifebit does not take custody of customer data and does not impose technical restrictions or proprietary formats that would prevent continued access or reuse of data after contract expiry.; ; This approach ensures no vendor lock-in and enables customers to manage data retention or transition independently within their AWS environment.
• End-of-contract process: At the end of the contract, access to Lifebit-provided support services concludes in line with the agreed contract terms. As all cloud resources, data, and configurations are provisioned and operated within the customer’s own AWS cloud account, customers retain full control and continued access to their infrastructure and data.; ; No data transfer, migration, or handover is required, and there is no service-imposed dependency or vendor lock-in. Customers may continue to operate, modify, or decommission their AWS resources using standard AWS tools and processes.; ; Activities included within the contract price include contract closure, confirmation of service cessation, and disabling Lifebit access where applicable. Any optional exit support—such as assistance with documentation, validation of access, cost optimisation advice, or support with resource decommissioning—can be provided at additional cost if requested.; ; Lifebit does not retain customer data or infrastructure following contract termination unless explicitly agreed. This approach ensures a straightforward, low-risk exit with minimal operational disruption and full customer autonomy.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Our onboarding and offboarding documentation is designed to be accessible, inclusive, and usable in line with EN 301 549 and WCAG 2.1 AA principles.; ; Documentation is delivered primarily through web-based formats that support screen readers, keyboard navigation, and assistive technologies. Content uses clear structure with headings, lists, and descriptive links, enabling logical reading order and efficient navigation. Text can be resized without loss of functionality, and colour contrast meets accessibility standards.; ; Documents are provided in accessible formats (HTML and accessible PDFs) rather than image-based files. Diagrams and screenshots include alternative text or descriptive captions where appropriate. Instructions avoid reliance on colour alone and use plain language to support cognitive accessibility.; ; Users can access onboarding and offboarding guides independently at any time, without requiring specialised software beyond a standard web browser. Where interactive steps are required, equivalent written instructions are provided.; ; Limitations may exist for externally linked third-party documentation, which is maintained by those vendors. However, core onboarding and offboarding materials owned by Lifebit are reviewed regularly and updated to maintain accessibility as standards and user needs evolve.

Using the service

• Web browser interface: Yes
• Using the web interface: Users primarily set up and manage the service using standard AWS management interfaces, including the AWS Management Console, AWS APIs, and command-line tools. Through these interfaces, users can provision, configure, scale, and manage AWS infrastructure and platform services such as compute, storage, networking, and managed services, subject to their own security policies, budgets, and governance controls.; ; As an experienced AWS reseller, Lifebit enables customers to procure and consume the full suite of AWS services at list price, while retaining full ownership and control of their AWS accounts, regions, identity management, security configuration, and infrastructure lifecycle.; ; In addition, where required, Lifebit provides an optional web-based platform that sits alongside AWS to support governed use of AWS resources for biomedical and data-intensive workloads. Through this interface, authorised users can configure analysis environments, provision AWS-backed compute for notebooks and pipelines, assign roles and permissions, and monitor usage and costs within customer-defined limits. Users can provision as many or as few AWS resources as required for their analyses, subject to agreed controls.; ; The Lifebit interface does not replace AWS management capabilities. Users cannot modify underlying AWS account settings, regions, or core security controls through Lifebit tooling unless explicitly agreed as part of managed services.
• Web interface accessibility standard: None or don’t know
• How the web interface is accessible: Users primarily interact with AWS services through the AWS Management Console and AWS-native interfaces. Accessibility for these interfaces is provided by AWS and aligns with AWS’s published accessibility conformance statements, including support for EN301549 and WCAG 2.1 AA where applicable. Users can configure AWS infrastructure, platform services, identity management, and security controls using standard AWS accessibility features and assistive technologies.; ; Where customers use the optional Lifebit web interface as an additional governed layer, the interface is designed to align with EN301549 (Web) and WCAG 2.1 AA accessibility standards. Users can navigate using keyboard-only controls, logical tab order, and visible focus indicators. The interface supports screen readers through semantic HTML, ARIA labels, descriptive headings, and accessible form fields. Text content is resizable without loss of functionality, and colour contrast meets accessibility thresholds.; ; Users can perform core tasks such as configuring analysis environments, launching AWS-backed compute, managing permissions, monitoring usage, and submitting workflows through accessible components. Status messages, errors, and confirmations are presented in text and not conveyed by colour alone.; ; Limitations may apply to third-party tools, visualisations, or user-developed code running on AWS resources. Accessibility does not extend to underlying cloud infrastructure managed directly through AWS services outside the Lifebit interface.
• Web interface accessibility testing: Formal user testing with assistive technology users has not yet been completed. Accessibility has instead been addressed through design and engineering best practices, including adherence to EN 301 549 and WCAG 2.1 AA principles, internal reviews, and testing using common assistive technologies such as keyboard-only navigation and screen reader checks. Feedback from users is reviewed and used to prioritise accessibility improvements, with further assistive technology testing planned as part of ongoing platform enhancement.
• API: Yes
• What users can and can't do using the API: The service exposes APIs through the underlying AWS platform and, where applicable, through the Lifebit platform layer.; ; Using AWS APIs, users can programmatically provision, configure, and manage cloud infrastructure resources such as compute, storage, networking, identity and access management, monitoring, and security controls, subject to their AWS account permissions and service limits. Users can create, modify, scale, and terminate resources directly using AWS-native APIs and automation tools.; ; The Lifebit platform API provides additional governed capabilities, enabling users to automate configuration of projects, access controls, datasets, workflows, and analysis execution within the Lifebit environment. Users can submit jobs, manage workloads, monitor usage, retrieve logs, and integrate with external systems, subject to buyer-defined governance policies.; ; Users cannot use APIs to bypass AWS security controls, modify AWS-managed infrastructure, or change platform-level security, tenancy boundaries, or compliance controls. Actions are constrained by role-based access controls, approval workflows, budgets, and data governance rules defined by the buyer. Certain advanced configurations or integrations may require administrative approval or provider support.
• API automation tools:
  • Ansible
  • Chef
  • OpenStack
  • SaltStack
  • Terraform
  • Puppet
  • Other
• Other API automation tools:
  • AWS CloudFormation
  • AWS CDK (Cloud Development Kit)
  • AWS SDKs and CLI
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
  • PDF
• Command line interface: Yes
• Command line interface compatibility:
  • Linux or Unix
  • Windows
  • MacOS
• Using the command line interface: Users can set up and manage the service using standard cloud provider command line tools, primarily the AWS Command Line Interface (CLI). Through the CLI, authorised users can provision and manage compute, storage, networking, identity, and managed platform services within their AWS accounts, subject to customer-defined permissions, budgets, and governance controls. Infrastructure can be created, modified, and decommissioned using infrastructure-as-code and scripted workflows.; ; Where the Lifebit platform is used, additional command line tools and SDKs may be provided to automate governed research workflows, job submission, and operational tasks. These tools expose only the resources and capabilities approved within the customer’s cloud environment.; ; Users cannot use the command line to bypass cloud security controls, modify restricted regions, alter billing ownership, or override identity, access management, or governance policies enforced by the customer or cloud provider. Core AWS account configuration, security baselines, and contractual limits remain controlled by the customer and cloud provider. All command line actions are logged and auditable in accordance with cloud-native monitoring and security policies.

Scaling

• Independence of resources: Users are isolated through AWS’s native multi-tenant cloud architecture and account-level separation. Each buyer consumes dedicated AWS resources within their own cloud account, ensuring workloads, performance, and capacity are not shared with other customers. AWS provides elastic scaling, service quotas, and regional capacity management to prevent contention. Resource usage, limits, and scaling policies are controlled by the buyer through AWS configuration. Lifebit does not pool or oversubscribe customer compute, storage, or network resources.
• Usage notifications: Yes
• Usage reporting:
  • Email
  • Other
• Other usage reporting: In addition to email notifications, users are alerted through in-platform user interface messages and dashboards. AWS-native monitoring and alerting services (for example usage thresholds, service quotas, and budget alerts) surface warnings directly within the AWS Management Console. Where the Lifebit platform is used, contextual UI notifications highlight approaching compute, storage, or budget limits to support proactive user action before limits are reached.
• Optimising consumption: Yes
• Automatic scaling: Yes

Analytics

• Infrastructure or application metrics: Yes
• Metrics types:
  • CPU
  • Disk
  • HTTP request and response status
  • Memory
  • Network
  • Number of active instances
• Reporting types:
  • API access
  • Real-time dashboards
• Resource tagging: Yes
• FOCUS resource tagging: No

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: AWS

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure

Backup and recovery

• Backup controls: Users control backups directly within their AWS account using AWS-native backup and snapshot services. Customers define what resources are backed up, backup frequency, retention periods, and recovery policies. Different resource types (for example virtual machines, databases, and storage volumes) can be backed up on separate schedules. Access controls and policies determine who can configure or modify backup settings. Lifebit can provide guidance and best-practice recommendations on backup configuration where required, but does not manage backups unless explicitly agreed at call-off.
• Datacentre setup: Multiple datacentres with disaster recovery
• Scheduling backups: Users schedule backups through a web interface
• Backup recovery:
  • Users can recover backups themselves, for example through a web interface
  • Users contact the support team
• Backup and recovery: Yes
• RPO/RTO: Yes

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: The service is designed to be resilient in line with the UK Government’s Cloud Security Principle 2: Asset protection and resilience, combining cloud-native resilience with application-level safeguards.; ; Datacentre resilience; The service runs entirely within the buyer’s chosen hyperscale cloud provider. Datacentre resilience—including physical security, power, cooling, and environmental controls—is provided by the cloud provider and designed for high availability using geographically separated, highly available facilities. These controls are independently audited and certified (e.g. ISO 27001, SOC/ISAE), and detailed evidence is available on request.; ; Platform resilience; The platform is deployed using cloud-native, fault-tolerant architectures. Services are distributed across multiple availability zones, avoiding single points of failure. Stateless components, managed services, and automated recovery mechanisms enable rapid restart and failover in the event of component failure.; ; Data resilience; Customer data remains in the buyer’s cloud environment and benefits from cloud-native durability features such as multi-zone storage, replication, and snapshotting, configured to client requirements and best practices.; ; Operational resilience; Continuous monitoring, alerting, and logging detect issues early. Planned maintenance is performed with minimal disruption, and incident response processes are in place to restore service quickly.; ; Detailed architectural and resilience documentation can be provided on request.
• Approach to resilience: The service is designed for resilience by operating within the buyer’s own cloud environment and leveraging cloud-native availability and recovery capabilities. Workloads are deployed using managed services, redundant components, and automated scaling features provided by the underlying cloud platform. This allows services to recover from component failure and scale in response to demand, subject to buyer configuration and policies.; ; Datacentre resilience is provided by the underlying cloud providers, which operate geographically distributed regions, availability zones, and resilient physical infrastructure. The service can be configured to use multi-zone or regional deployment patterns where required by the buyer.; ; Operational resilience is further supported through controlled release processes, monitoring, and automated health checks. The platform avoids single points of failure by design and relies on stateless services and externally managed storage where appropriate. Backup, restore, and disaster recovery options are available using cloud-native mechanisms and can be configured to meet buyer recovery objectives.; ; Detailed architecture and resilience configurations can be provided on request, as they may vary depending on buyer requirements and cloud environment.
• Outage reporting: Service outages and incidents are communicated to users through agreed support and communication channels. Where an issue relates to the underlying cloud infrastructure, users can reference the relevant cloud provider’s public service status dashboards. For issues attributable to Lifebit's Platform services, affected customers are notified directly via email or agreed incident notification channels, with updates provided as the incident progresses. Operational status and incident information can also be shared through support tickets and service communications. Where required, buyers can integrate their own monitoring and alerting using cloud-native tools and APIs within their environment alongside Lifebit's own monitoring and telemetry tools.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password
  • Other
• Other user authentication: All authentication occurs over encrypted channels (TLS), and IP allow listing can be configured for additional access control
• Access restrictions in management interfaces and support channels: Access to management interfaces and support channels is restricted using role-based access control and least-privilege principles. Administrative access is limited to authorised personnel and protected by strong authentication. Access is granted based on defined job roles and reviewed regularly. Support channels are restricted to verified customer contacts, and sensitive actions require identity verification and appropriate authorisation. All administrative and support access is logged and monitored to provide auditability and support security monitoring and incident investigation. Access rights are revoked promptly when no longer required, including when roles change or personnel leave the organisation.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password
  • Other
• Description of management access authentication: All authentication occurs over encrypted channels (TLS), and IP allow listing can be configured for additional access control
• Devices users manage the service through: Dedicated device on a segregated network (providers own provision)

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: We follow a comprehensive information security management framework aligned to recognised standards and client requirements, with clear accountability and enforcement.; ; Policies and standards; Lifebit maintains formal, documented policies covering information security, data protection, access control, incident management, risk management, supplier security, business continuity, and secure development. Policies align with ISO/IEC 27001 principles, UK GDPR, NHS expectations where applicable, and cloud security best practices.; ; Reporting structure; Overall accountability sits with senior management, with day-to-day responsibility held by a designated security leadership function. Security risks, incidents, and compliance status are reported through defined internal governance forums and escalated to executive level where required.; ; Processes and enforcement; Policies are embedded into operational processes, including onboarding/offboarding, change management, access approvals, and incident response. Role-based access control, least-privilege principles, audit logging, and monitoring ensure compliance in practice.; ; Assurance; All staff receive mandatory security and data protection training. Compliance is reinforced through regular reviews, risk assessments, vulnerability management, and independent audits where required. Deviations are tracked, remediated, and reviewed to ensure continuous improvement.; ; This approach ensures security policies are consistently applied, monitored, and enforced across the service lifecycle.

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Configuration and change management are governed through controlled, auditable processes aligned with ISO/IEC 27001. Service components are tracked throughout their lifecycle using version control, configuration records, and change histories. Infrastructure and application changes are managed through defined release and approval workflows. All changes are assessed for potential security, stability, and compliance impact, including dependency and vulnerability checks, prior to deployment. Changes are tested in non-production environments before release, and all deployments and configuration changes are logged to provide traceability and support audit and incident investigation.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Lifebit operates a formal vulnerability management programme governed by our Operational Security Policy. We use Rapid7 InsightVM and related tooling to perform regular vulnerability scanning across production, staging and corporate environments. Scan results are assessed using CVSS, asset criticality and exposure, and vulnerabilities are prioritised as Critical, High, Medium, Low or Informational with defined remediation SLAs. Patches are tested in non‑production before production rollout, with an emergency change path for critical fixes. Threat intelligence is sourced from Rapid7 feeds, vendor advisories (e.g. AWS, OS, middleware) and public vulnerability databases such as NVD/CVE to drive timely remediation.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Lifebit operates 24×7 protective monitoring using centralised logging and a managed SOC service. Logs from AWS (CloudTrail, GuardDuty, VPC Flow Logs, host logs), Google Workspace and managed endpoints are streamed into our SIEM for correlation and alerting Operational Security Policy, ; Security Monitoring. Integrity360’s SOCaaS triages alerts, raises tickets and escalates to Lifebit’s Security Operations team under our Security Monitoring and Incident Response Process and Incident Response Plan. High‑severity incidents are responded to immediately, with defined SLAs for investigation, containment and remediation
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: Lifebit operates a formal incident management process defined in our Incident Response Plan and supporting procedures. We maintain pre‑defined playbooks for common events (e.g. malware, account compromise, service outage, data breach), covering detection, triage, containment, eradication and recovery. Incidents can be reported by users via our service desk, email, and direct escalation to the Security Operations team. Security events from logging, SIEM and our managed SOC are also raised as incidents. For significant incidents, we provide customers with incident reports that include timeline, impact assessment, root cause, remediation actions and preventive measures, in line with contractual and regulatory obligations.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Separation between users

• Virtualisation technology used to keep applications and users sharing the same infrastructure apart: Yes
• Who implements virtualisation: Supplier
• Virtualisation technologies used: Other
• Other virtualisation technology used: Public cloud providers virtualisation
• How shared infrastructure is kept separate: Different organisations are kept apart through strong tenancy isolation within the buyer’s cloud infrastructure.; ; Each organisation operates in a separate cloud account, project, or tenant, ensuring no shared storage, compute, or network resources. Network isolation (VPCs, subnets, security groups) prevents cross-access. Role-based access control enforces organisation-specific permissions, and data access policies restrict visibility to authorised users only. All actions are audited and logged per tenant. Because data and workloads run in organisation-owned cloud environments, there is no cross-organisation data commingling, ensuring complete logical and operational separation.

Energy efficiency

• Energy-efficient datacentres: Yes
• Description of energy efficient datacentres: The service is delivered using Amazon Web Services (AWS) data centres. AWS designs, builds, and operates its data centres in alignment with the principles of the EU Code of Conduct for Energy Efficient Datacentres, focusing on energy efficiency, carbon reduction, and sustainable operations.; ; AWS implements industry-leading practices including high-efficiency power and cooling systems, extensive use of renewable energy, continuous energy monitoring, and optimisation of server utilisation. Data centres are designed to minimise power usage effectiveness (PUE) and environmental impact across their lifecycle.; ; As a reseller, Lifebit does not operate physical data centres but ensures that services are delivered exclusively on cloud infrastructure provided by suppliers that publicly commit to sustainability and energy efficiency standards. Customers benefit directly from AWS’s adherence to recognised energy efficiency initiatives and reporting frameworks, while retaining control over region selection to meet environmental and regulatory requirements.

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: We offer a free START tier that provides access to core platform functionality, including a single workspace, unlimited users, and essential data science and workflow tools. Advanced features, enterprise governance, automation, and premium support are not included. The free version is not time-limited but is functionally restricted.
• Link to free trial: https://lifebit.ai/lifebit-start-first-hand-try/

Discount

• Provide your minimum discount applicable to your baseline prices: 0%

Formula for calculating price of your services

• Formula for calculating price of your services:

  Which of the core deployment models you intend to offer

  • Public Cloud
  • Private Cloud

  Public Cloud - Formula for calculating price of your services

  ---

  Total Cost

  The Total Cost for a buyer's call off requirement in a Public Cloud Deployment

  =

  Baseline Pricing

  AWS Pricing: https://aws.amazon.com/ec2/pricing/; https://aws.amazon.com/s3/pricing/?nc=sn&loc=4&refid=829c3a08-8fc6-4b06-8827-0e35a45f2e59

  Baseline Pricing - Web link

  https://aws.amazon.com/s3/pricing/?nc=sn&loc=4&refid=829c3a08-8fc6-4b06-8827-0e35a45f2e59

  -

  Minimum Discounting

  0%

  +

  Onboarding Activity

  Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process

  +

  Additional sources of cost

  0

  -

  Additional sources of cost reduction

  0

  ---

  Private Cloud - Formula for calculating price of your services

  ---

  Total Cost

  The Total Cost for a buyer's call off requirement in a Private Cloud Deployment

  =

  Baseline Pricing

  Lifebit Trusted Research Environment

  -

  Minimum Discounting

  0%

  +

  Onboarding Activity

  Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process

  +

  Additional sources of cost

  N/A

  -

  Additional sources of cost reduction

  N/A

  ---

• Total Cost: The Total Cost for a buyer's call off requirement in a Public Cloud Deployment
• Baseline Pricing: AWS Pricing: https://aws.amazon.com/ec2/pricing/; https://aws.amazon.com/s3/pricing/?nc=sn&loc=4&refid=829c3a08-8fc6-4b06-8827-0e35a45f2e59
• Baseline Pricing - Web link: https://aws.amazon.com/s3/pricing/?nc=sn&loc=4&refid=829c3a08-8fc6-4b06-8827-0e35a45f2e59
• Minimum Discounting: 0%
• Onboarding Activity: Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process
• Additional sources of cost: 0
• Additional sources of cost reduction: 0
• Total Cost: The Total Cost for a buyer's call off requirement in a Private Cloud Deployment
• Baseline Pricing: Lifebit Trusted Research Environment
• Minimum Discounting: 0%
• Onboarding Activity: Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process
• Additional sources of cost: N/A
• Additional sources of cost reduction: N/A

Mandatory certifications

• Mandatory certifications:

  Are you are bidding to offer IaaS and/or PaaS as a reseller or are you in sole control of the infrastructure

  Reseller

  Cloud service suppliers you intend to resell with evidence

  Organisation 1

  Organisation name

  Amazon Web Services

  Website address/upload for organisation

  Website address

  Website address

  https://partners.amazonaws.com/partners/0010h00001ZXW49AAH/Lifebit%20Biotech%20Inc.

  ISO 9001 certification

  Provided

  ISO 27001 certification

  Provided

  ISO 20000-1 certification

  Provided

  Are you reliant on the Cloud Service Provider for some accreditations

  Yes

Cyber Essentials

• Do you have a Cyber Essentials Plus certificate?: Yes
• Cyber Essentials Plus certificate Number: D98208db-38d6-4cd7-b77b-6ccd32dc2fbc

Non-mandatory Standards and certifications

• ISO 28000:2022 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Other security certifications: Yes
• Any other security certifications: FedRamp Marketplace Ready Certification

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Plans for engaging a diverse range of businesses in engagement activities prior to appointing subcontractors (including activities prior to award of the main contract and during the contract term)
    • Plans to respond flexibly and adapt approaches to community engagement and initiatives

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
    • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Understanding of issues relating to entering the contract workforce

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition

Service documents

• Pricing document

  ODT

• Service definition document

  PDF

• Terms and conditions

  ODT

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at procurement@lifebit.ai. Tell them what format you need. It will help if you say what assistive technology you use.