SERVITA PROFESSIONAL SERVICES (UK) LIMITED

Advanced Data Platforms and Managed Infrastructure - Quantum Infrastructure

Servita’s industry leading Architects have a proven track record of identifying and creating optimum solutions to what are often very complex business problems. Our Advanced Data Platform and Managed Services provide high performance, infinitely scalable and secure cloud-hosted data services. Sectors include health and social care, justice, defence, local government.

Features

• Vertical and horizontal auto-scaling to keep response times low.
• Advanced trace identification, monitoring, and alerting.
• Interoperability through API/interface standards such as FHIR.
• Connectivity Options: N3, HSCN, Janet, and many others.
• Automated deployment, scaling, testing, and monitoring.
• Systems integration to eliminate need for data store and management.
• DevOps to systematically orchestrate fast delivery of applications and services.
• CI/CD (Continuous Integration/Continuous Delivery or Deployment).
• Data Exchange, in formats such as XML, and more.
• Cloud and Solutions Architecture, giving access to cloud computing.

Benefits

• Reliably access the system due to high availability/CI.
• Achieve cost efficiencies, through automatic scaling around system demand.
• Exchange information across different devices, due to platform agility.
• Access data from multiple sources, speedily integrated and aggerated.
• Transfer offline data to online using dataset onboarding.
• Investigate anomalies and confirm relationships, through data interrogation.
• Utilise our exceptionally managed service standards.
• Support business or operational needs through fast integration.
• Quickly and easily access information anywhere, utilising internet connectivity.
• Safeguard data through our trace identification, monitoring, and alerting.

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tony.riley@servita.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

158354902362499

Contact

Rich Story
+447918722104
tony.riley@servita.com

About your service

• Service categories:

  IaaS

  Quantum Infrastructure

  • Any Quantum Infrastructure

Service scope

• Service constraints: Patch support for a typical Kubernetes release often comes with approximately 1 year of patch support as standard. Any upgrades to this package, which include longer timeframes of patch support, may incur a one-off upgrade fee.; ; A further constraint surrounds the fact that Servita cloud environments can be fully private and secure. This means that the client may need to set up a site-to-site VPN, in order to access private cloud resources.
• System requirements:
  • Middleware licensing (if any) to be covered by the client.
  • Minimum two EC2 per Kubernetes cluster to achieve high availability.
  • Access to the system requires an internet connection.
  • Either AWS or Azure cloud hosting accounts.
  • GitLab for VCS, IaC state storage and CI/CD pipelines.
  • ArgoCD and optionally ArgoCD rollouts for K8s CD deployments.
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud

User support

• Email or online ticketing support: Yes, at extra cost
• Support response times: We respond to all tickets within the same day of their issue. In the event that tickets relate to high severity faults, we will respond, and diagnose the issue, using our technical consultants. Response times in this case, through our previous experience, have shown to take up to 2 hours. These response times do not alter with respect to weekends, as they are typical across the whole of the week, not just weekdays.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: EN 301 549
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: Yes
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: EN 301 549
• Web chat accessibility testing: Customers are given access to a Jira Service Management portal where they can submit, interact and view status of helpdesk tickets. Within the customer portal, it is possible to access the webchat facility. The webchat facility will automatically create and update helpdesk tickets. We rely on original suppliers’ testing for webchat accessibility, e.g. Atlassian documents its testing in Voluntary Product Accessibility templates, published online, and reference manual keyboard testing, screen reader testing, assistive technology checks, colour contrast testing and use of automated tools.
• Onsite support: Yes, at extra cost
• Support levels: Servita provides three support levels, basic level support, developer level support, and business level support. ; 1. Basic level support - This level of support offers 24/7 customer service, from our internal customer engagement team, as well as support forums. These features will offer cross-applicational support to clients when needed. Further to this, the basic level of support provides 4 Core “Trusted Advisor” checks and a personal health dashboard. Associated costs: No TAM (Total Addressable Market) - Free. ; 2. Developer level support - Our developer level of support offers all of the support within the basic level of support, as well as one extra benefit. This additional benefit entails access to Technical and Architectural Cloud Support Associates. Here, clients can contact Associates via email, utilising one primary contact within their company. Associated Costs: No TAM (Total Addressable Market) - 5% x monthly AWS usage. ; 3. Business Level Support - Servita’s business level of support offers all of the support included within the developer support package, with the following additional extras: 24/7 access to PaaS Support, via email and telephone, and Case management support. Associated Costs: TAM, above £480 or cost percentage (pm). ; ; We provide a Cloud Support Engineer.
• Support available to third parties: Yes
• AI chatbot: No

Onboarding and offboarding

• Getting started: Servita will conduct an initial discovery session to understand requirements, constraints, and ways of working. We will tailor our services to strike cohesion with clients and ensure desired outcomes are achieved in a way that generates high levels of customer satisfaction. The output of the initial discovery will be a Servita Methodology Matrix which plots all key deliverables, their accountable owners, their purpose and at which stage they will be delivered to which areas of the client team(s). User documentation including any system protocols and procedures would be produced in Confluence and/or Swagger and Users would be given access to Servita shared repositories as required.; ; Servita conducts practical, online, hands-on workshops focused on specific technologies within the IaaS/PaaS stack, such as AWS services, Terraform, and CI/CD pipelines. For example, in the UKRI TFS Optimisation proposal, Servita committed to delivering over 30 hours of structured, role-specific training per team member, including technical workshops on "secure-by-design engineering practices" and "Infrastructure-as-Code (Terraform)"; ; Servita employs a "train-the-trainer" model to ensure that client staff can cascade knowledge internally, multiplying the impact of the initial training sessions.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
  • Other
• Other documentation formats: Online libraries
• End-of-contract data extraction: At contract end, users can extract and export their data in JSON, CSV and SQL formats. Service and Security Management Logs can also be retained and stored according to customer requirements. Typically, Servita would co-define an exit strategy with the client, capturing the details and protocols that will be followed at contract end. Data extraction forms part of the strategy, ensuring we fully meet client expectations. ; ; To protect data integrity and security, Users are requested to provide requirements for how the data is extracted and stored in a way that complies with industry best practice and Government security policy. Servita will support the entire data extraction process including any reconciliation checks should they be required between source and target databases.
• End-of-contract process: Preparation, hardening and full implementation / live service of the platform is included. Training of the base components, release and configuration management protocols and handover of the DevOps practices are included in the price. Training, TNA, Guides and strategic road-mapping for bespoke elements are subject to impact assessment and would be provisioned via Servita Consultants. Should there be a need to transition the platform and/or migrate data, Servita will work with the client to co-define an exit and migration plan that ensures all requirements are captured and agreed thus enabling a smooth and well executed transition that meets with client expectations and needs. All data, license/user accounts and technical artefacts will be delivered to the client.
• Documentation accessibility standard: EN 301 549

Using the service

• Web browser interface: Yes
• Using the web interface: Users can access trace monitoring, alerting and logging components to get full visibility of activity and health across the platform. This is achieved through a selection of OpenTelemetry made available to the customer and the usage of either Azure or AWS’s native monitoring solutions.; Clients can:; • Request and configure customised operational views of their dashboards, tailored to business units or operational roles; • Define and set thresholds for automated monitoring; • Interact with the change management workflow through the portal to review implementation plans and provide formal sign-off via Change Advisory Board; • Raise, track and interact with support tickets directly through collaboration tools like Microsoft Teams or Slack; • View per-site or per-service breakdowns of spend data and asset lifecycles (including refresh and retirement statuses) to maintain cost transparency; • Review and modify user roles and access policies as part of structured Joiner-Mover-Leaver lifecycle; ; Users cannot modify resource and asset deployments, as this is done through IaC.
• Web interface accessibility standard: None or don’t know
• How the web interface is accessible: Users can login via the AWS interface to view deployed resources and perform read-only actions such as viewing logs and metrics. Users cannot modify deployments as this is done through IaC.; Users can:; • Navigate Customer Portal and main agent ticket view using only a keyboard. ; • Create and Manage Tickets: Screen reader users (utilizing NVDA, JAWS, or VoiceOver) can usually identify form fields, buttons, status updates. ; • Consume Content at High Zoom: interface supports text resizing and browser zooming up to 400% ; • Understand Structure via Headings: logical heading structure (H1, H2, etc.), allows assistive technology users to scan and jump to relevant sections.; • Operate Basic Form Controls: inputs like text fields, checkboxes, and radio buttons in the Customer Portal are largely compliant; ; Customers can’t:; • Use Complex Drag-and-Drop Features via keyboard or screen reader.; • Interact with Some Interactive Charts and Reports; • Navigate "Focus Traps" in Certain Modals; • Identify All Statuses via Colour Alone: some legacy views may still use colour as the primary indicator for priority or status.
• Web interface accessibility testing: Servita has not conducted any web interface testing with assistive technology users, but we believe the software providers carried this out.
• API: Yes
• What users can and can't do using the API: Depending on requirements, APIs can be made available for Users to make changes such as setting internal and external connection points / environments, setting rate limits and configuring exclusion rules. We would encourage users to gain increased interconnectivity between their systems using the platform and as such we can provide automated validation tools that check formats and expected versus actual responses. There are CLI tools for interacting with AWS, Azure and Kubernetes, but we would not give Users access to this to retain platform integrity.; ; No Direct Deployment Modification via API. Users cannot modify infrastructure deployments through a standard API or web interface.; ; All infrastructure and environment configurations are managed via Infrastructure as Code (IaC) pipelines e.g. Terraform or Ansible. This prevents ‘configuration drift’ and ensures all changes are peer-reviewed, version controlled and tested before being committed to the environment.
• API automation tools:
  • Ansible
  • Terraform
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
  • PDF
• Command line interface: No

Scaling

• Independence of resources: Servita works to guarantee users aren’t affected by the demand other users place upon our service in two ways. The first of these, is by ensuring that deployments are made in isolation from one another. This means that customers will be separated to ensure the performance of our service when there is collaborative demand from various areas. Secondly, we ensure that clients have dedicated cloud-hosted solution provisioning. This allows us to deploy cloud resources flexibly in order to scale up when usage spikes.
• Usage notifications: Yes
• Usage reporting:
  • API
  • Email
  • SMS
  • Other
• Other usage reporting: Raising a ticket in the ticketing system.
• Optimising consumption: Yes
• Automatic scaling: Yes

Analytics

• Infrastructure or application metrics: Yes
• Metrics types:
  • CPU
  • Disk
  • HTTP request and response status
  • Memory
  • Network
  • Number of active instances
• Reporting types:
  • Real-time dashboards
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: No

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Microsoft Azure and AWS

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest: Other
• Other data at rest protection approach: We use encryption at various levels. We utilise AWS Key Management Service to encrypt Kubernetes secrets and use Doppler which integrates with AWS KMS. We enable encryption for Amazon EBS volumes attached to EKS worker nodes. All S3 buckets have encryption enabled.
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase
  • Physical Destruction / Hardware containing data is completely destroyed

Backup and recovery

• What’s backed up:
  • Virtual Machines
  • Kubernetes Clusters
  • IaC States
  • Cloud Resources (EC2, RDS etc.)
  • Databases
  • File Storage
• Backup controls: Servita offer clients control over which backups are performed by agreeing upon this in advance of the outset of services. However, standard resources are backed up automatically. Clients can also request changes to their back up requirements. This will be requested via email, in order to meet compliance and requirements.
• Datacentre setup: Multiple datacentres with disaster recovery
• Scheduling backups: Users contact the support team to schedule backups
• Backup recovery: Users contact the support team
• Backup and recovery: Yes
• RPO/RTO: Yes

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: The below demonstrates our guaranteed availability levels.; • Monthly Uptime Percentage: Less than 99.95% but greater than or equal to 99.0%. Service Credit Percentage: 10%; • Monthly Uptime Percentage: Less than 99.0% but greater than or equal to 95.0%. Service Credit Percentage: 25%; • Monthly Uptime Percentage: Less than 95.0%. Service Credit Percentage: 100%; ; Users can be refunded by a number of means including credit note repayments or discounted monthly fees subject to the terms of the agreement with the client.
• Approach to resilience: Available on request.
• Outage reporting: Servita place our clients at the heart of everything we do, reporting any outages reactively and appropriately. In order to ensure that all clients are fully informed on any details surrounding service provision, we will report all outages promptly in the following forms: SMS, Email alerts, Webhooks, and public dashboards if required. The latter option will incur an additional cost. Outages are reported to the client immediately with service recovery updates provided at least once every 30 minutes. Service recovery updates may be provided by our Cloud Support Engineers via phone, SMS or email.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: Servita restricts access in management interfaces and support channels by using IAM to provide access control to cloud services. We also utilise RBAC (Role Based Access Control) permissions, which are assigned to all individual IAM management accounts in order to further enhance cluster level access restrictions. Finally, we implement K8 as a control across our service, with respect to this. All of these factors ensure that management interfaces and support channels have the required restricted access necessary for safe, excellent performance.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password
• Devices users manage the service through:
  • Dedicated device on a segregated network (providers own provision)
  • Dedicated device on a government network (for example PSN)

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: You control when users can access audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: Cyber Security Plus, Cyber Essentials
• Information security policies and processes: Servita’s goal is to provide secure, scalable and future-proof solutions to UK Gov. As such, we have implemented an Information Security Management Systems (ISMS) at the forefront of our QMS, containing policies and procedures for considered and controlled management of sensitive data, systems, services and processes. Our ISMS uses the 27001 and Cyber Essential Plus standards as a baseline. Our ISMS covers every aspect of the services we provide including: Access Control, Anti-virus, Malware and Threat Detection, Backup and Recovery, Data Loss Prevention, Data Protection, Password Management, and Personal Conduct. ; ; Servita’s Information Systems Manager is responsible for all staff inductions, information security training programmes and for ensuring all services are carried out in accordance with our ISMS. All breaches of information security, actual or suspected, will be reported to the Information Systems Manager, who is responsible for maintaining the security policy and providing advice and guidance on its implementation. All business managers are directly responsible for implementing the policy within their own areas and for adherence by their staff. It is the responsibility of each member of staff to adhere to this policy.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Servita tracks changes using internal change management governance, part of our QMS. Our Change Control Policy is available upon request, as are demonstrations of policy implementation through the platform. DevOps tooling supports Technical Execution and Audit, using uses Infrastructure as Code to manage configurations and CI/CD pipelines to automate the testing and deployment of changes, ensuring we have a secure, yet auditable record of any changes made to the service, technology stack, or code base. Significant changes are reviewed by the Change Advisory Board, which delivers support to the Change Management Team, reviewing requested changes and assessing change/update prioritisation.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Servita will adhere to the service pack update and patching processes as defined in our ISO 27001 information security policy. Patch/release deployment is pre-configured and built into our PaaS code in order to enable release implementation at the node/pod/cluster level. This enables Servita to achieve 0 downtime. Patches can therefore be deployed immediately after approval is obtained from the Change Advisory, and Information Security advisory boards. This ensures that we can reactively deploy patches where needed. Furthermore, Servita subscribe to Norton 360 and Microsoft Security Insider threat/vulnerability intel boards to remain abreast of emerging threats.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Servita’s PaaS holds built-in security monitoring and alerting tools, which ensure that we can protectively monitor our service. Additionally, DataDog handle all trace IDs, logging and alerting across all nodes and pods. To enhance this further, we also utilise CloudWatch, which protects data at rest, using encryption. All security incidents are responded to immediately. In the event that a potential compromise has been detected, our policy is to notify the client. This step is taken in parallel to the performance of an in-depth risk analysis. Both the results of this analysis, and client direction will determine our action plan.
• Incident management type: Supplier-defined controls
• Incident management approach: Servita records and manages incidents as per our security incident policy and response procedure, and thus operates pre-defined processes for common events. Incidents can be reported by users via email, SMS or telephone. Our Live support services team will then perform root cause analysis on any incidents that occur, with corrective and preventative action plans documented and implemented to prevent or reduce the probability of the incident reoccurring in the future. Following this, Incident Reports are then shared with clients within 24 hours of the incident occurring, using communication channels such as email, SMS and telephone.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Separation between users

• Virtualisation technology used to keep applications and users sharing the same infrastructure apart: Yes
• Who implements virtualisation: Third-party
• Third-party virtualisation provider: AWS EC2 and Azure VMs
• How shared infrastructure is kept separate: Servita’s service operates in a segregated form, whereby client infrastructure, including the infrastructure of the network, is physically segregated from other organisations. This means that different organisations do not share the same infrastructure, and thus, do not need to be kept apart.

Energy efficiency

• Energy-efficient datacentres: Yes
• Description of energy efficient datacentres: In compliance with the EU Code of Conduct for Energy Efficient Datacentres, we utilise Microsoft and Amazon cloud computing, which reduces the IT load of the operation. This ensures that we reduce energy consumption in a cost-effective manner. ; ; Microsoft is committed to reducing the environmental impact caused by the energy use of their products. As such, they comply with the EU Ecodesign Directive for Energy-related Products (2009/125/EC) and its implementing regulations ("Ecodesign Directive") when applicable. In doing so, they have integrated methods which will reduce the energy consumed by their equipment into their strategy. Our devices comply with the European Commission's Regulation for Standby and Off Mode Power Consumption for Electronic Household and Office Equipment. ; ; Similarly, businesses in Europe can reduce energy consumption by up to 80% when running applications and services through AWS cloud as opposed to operating dedicated data centres. Amazon is also committed to purchasing 100% of its energy from renewable sources resulting in a potential 96% reduction in carbon emissions for an average workload being handled in our AWS cloud platforms.

Pricing

• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: We can offer free access to monitoring and trace activity dashboards and can potentially create mock API endpoints to demonstrate functionality and/or message response types. This is subject to requirements and feasibility.

Discount

• Provide your minimum discount applicable to your baseline prices: 0.5%

Formula for calculating price of your services

• Formula for calculating price of your services:

  Which of the core deployment models you intend to offer

  • Public Cloud
  • Private Cloud

  Public Cloud - Formula for calculating price of your services

  ---

  Total Cost

  The Total Cost for a buyer's call off requirement in a Public Cloud Deployment

  =

  Baseline Pricing

  Baseline pricing for services delivered under a Public Cloud deployment model is defined within Servita’s G-Cloud 15 service pricing documentation, published as part of this framework application.; ; This includes maximum SFIA-aligned day rates for professional and managed services, together with unit-based pricing for Infrastructure as a Service (IaaS) components. These prices represent the baseline from which call-off pricing is calculated.

  Baseline Pricing - Web link

  https://www.servita.com

  -

  Minimum Discounting

  0.5%

  +

  Onboarding Activity

  Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process

  +

  Additional sources of cost

  Additional sources of cost may include changes to public cloud provider pricing, variations in resource consumption, additional security or compliance requirements, increased service scope, or buyer-specific integration and data migration activities.; ; Where applicable, third-party licence costs, network connectivity charges, or regulatory requirements may also impact the total cost. Any such costs are identified transparently during call-off and agreed with the buyer through the applicable contractual mechanisms.

  -

  Additional sources of cost reduction

  Cost reductions may be achieved through committed consumption with cloud providers, service optimisation activities, right-sizing of resources, automation, and removal of unused or under-utilised services.; ; Buyers may also benefit from volume-based efficiencies, longer contract terms, or sector-specific discounts where applicable. Servita works collaboratively with buyers to identify opportunities to reduce ongoing costs while maintaining service performance and security.

  ---

  Private Cloud - Formula for calculating price of your services

  ---

  Total Cost

  The Total Cost for a buyer's call off requirement in a Private Cloud Deployment

  =

  Baseline Pricing

  Baseline pricing for services delivered under a Public Cloud deployment model is defined within Servita’s G-Cloud 15 service pricing documentation, published as part of this framework application.; ; This includes maximum SFIA-aligned day rates for professional and managed services, together with unit-based pricing for Infrastructure as a Service (IaaS) components. These prices represent the baseline from which call-off pricing is calculated.

  -

  Minimum Discounting

  0.5%

  +

  Onboarding Activity

  Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process

  +

  Additional sources of cost

  Additional sources of cost may include changes to public cloud provider pricing, variations in resource consumption, additional security or compliance requirements, increased service scope, or buyer-specific integration and data migration activities.; ; Where applicable, third-party licence costs, network connectivity charges, or regulatory requirements may also impact the total cost. Any such costs are identified transparently during call-off and agreed with the buyer through the applicable contractual mechanisms.

  -

  Additional sources of cost reduction

  Cost reductions may be achieved through committed consumption with cloud providers, service optimisation activities, right-sizing of resources, automation, and removal of unused or under-utilised services.; ; Buyers may also benefit from volume-based efficiencies, longer contract terms, or sector-specific discounts where applicable. Servita works collaboratively with buyers to identify opportunities to reduce ongoing costs while maintaining service performance and security.

  ---

• Total Cost: The Total Cost for a buyer's call off requirement in a Public Cloud Deployment
• Baseline Pricing: Baseline pricing for services delivered under a Public Cloud deployment model is defined within Servita’s G-Cloud 15 service pricing documentation, published as part of this framework application.; ; This includes maximum SFIA-aligned day rates for professional and managed services, together with unit-based pricing for Infrastructure as a Service (IaaS) components. These prices represent the baseline from which call-off pricing is calculated.
• Baseline Pricing - Web link: https://www.servita.com
• Minimum Discounting: 0.5%
• Onboarding Activity: Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process
• Additional sources of cost: Additional sources of cost may include changes to public cloud provider pricing, variations in resource consumption, additional security or compliance requirements, increased service scope, or buyer-specific integration and data migration activities.; ; Where applicable, third-party licence costs, network connectivity charges, or regulatory requirements may also impact the total cost. Any such costs are identified transparently during call-off and agreed with the buyer through the applicable contractual mechanisms.
• Additional sources of cost reduction: Cost reductions may be achieved through committed consumption with cloud providers, service optimisation activities, right-sizing of resources, automation, and removal of unused or under-utilised services.; ; Buyers may also benefit from volume-based efficiencies, longer contract terms, or sector-specific discounts where applicable. Servita works collaboratively with buyers to identify opportunities to reduce ongoing costs while maintaining service performance and security.
• Total Cost: The Total Cost for a buyer's call off requirement in a Private Cloud Deployment
• Baseline Pricing: Baseline pricing for services delivered under a Public Cloud deployment model is defined within Servita’s G-Cloud 15 service pricing documentation, published as part of this framework application.; ; This includes maximum SFIA-aligned day rates for professional and managed services, together with unit-based pricing for Infrastructure as a Service (IaaS) components. These prices represent the baseline from which call-off pricing is calculated.
• Minimum Discounting: 0.5%
• Onboarding Activity: Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process
• Additional sources of cost: Additional sources of cost may include changes to public cloud provider pricing, variations in resource consumption, additional security or compliance requirements, increased service scope, or buyer-specific integration and data migration activities.; ; Where applicable, third-party licence costs, network connectivity charges, or regulatory requirements may also impact the total cost. Any such costs are identified transparently during call-off and agreed with the buyer through the applicable contractual mechanisms.
• Additional sources of cost reduction: Cost reductions may be achieved through committed consumption with cloud providers, service optimisation activities, right-sizing of resources, automation, and removal of unused or under-utilised services.; ; Buyers may also benefit from volume-based efficiencies, longer contract terms, or sector-specific discounts where applicable. Servita works collaboratively with buyers to identify opportunities to reduce ongoing costs while maintaining service performance and security.

Mandatory certifications

• Mandatory certifications:

  Are you are bidding to offer IaaS and/or PaaS as a reseller or are you in sole control of the infrastructure

  Reseller

  Cloud service suppliers you intend to resell with evidence

  Organisation 1

  Organisation name

  Microsoft Azure

  Website address/upload for organisation

  Website address

  Website address

  https://learn.microsoft.com/en-us/azure/compliance/offerings/offering-iso-27017#audit-reports-and-certificates

  Organisation 2

  Organisation name

  AWS

  Website address/upload for organisation

  Upload

  Upload

  Provided

  ISO 9001 certification

  Provided

  ISO 27001 certification

  Provided

  ISO 20000-1 certification

  Provided

  Are you reliant on the Cloud Service Provider for some accreditations

  Yes

Cyber Essentials

• Do you have a Cyber Essentials Plus certificate?: Yes
• Cyber Essentials Plus certificate Number: 4e50487b-a06f-4461-a62e-538dc5dcf768

Non-mandatory Standards and certifications

• ISO 28000:2022 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Other security certifications: Yes
• Any other security certifications: ISO 27001

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
    • How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
    • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
    • Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
    • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
    • Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations
    • Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)
    • Plans for positive actions with community groups.
    • Measures to engage users and communities and build relationships to increase community integration build trust and influence how the contract is delivered
    • Plans to respond flexibly and adapt approaches to community engagement and initiatives

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
    • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition
    • Introducing transparency to pay and reward processes
    • Working conditions which promote an inclusive working environment and promote retention and progression
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Understanding of the issues affecting the development of new skills by target cohort
    • Understanding of the underlying factors affecting improvements to reduce barriers to entry and training schemes for the target cohort(s) related to the contract workforce
    • Other measures to offer development opportunities for the target cohort(s) in the contract workforce
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
    • Understanding of issues relating to entering the contract workforce
    • Creation of outreach activities to create a pipeline of employees for the future contract delivery
    • Content of the outreach activity is designed to suit the target cohort

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
    • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition
    • Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tony.riley@servita.com. Tell them what format you need. It will help if you say what assistive technology you use.