Drupal migrations
Versantus Drupal Cloud CMS is a secure, compliant Drupal content management system, providing complex Drupal integration, single sign-on, CRM, configuration and workflow management.
Versantus are Drupal migration specialists and can help with migrating from previous versions such as Drupal 7, 8 and 9, or moving to Drupal from other platforms.
Features
- Drupal best practice implementation
- Expert Drupal module evaluation based on requirements
- Drupal migrations
- Customisable responsive Drupal template design
- Drupal Multilingual Capability
- Drupal publishing workflows and content versioning
- Drupal development using agile methodology
- Headless Drupal
- Drupal Consultancy
- Drupal app development
Benefits
- Drupal security compliant
- Fully managed Drupal hosting on Acquia
- Thousands of Drupal Association approved modules
- UK based expert Drupal Development team
- Certified Drupal Experts
- Acquia Preferred Partner
- Drupal Association Supporting Partner
Pricing
£950 a unit a day
- Free trial available
Service documents
Request an accessible format
Framework
G-Cloud 14
Service ID
1 6 9 4 9 6 7 7 6 9 9 5 6 9 7
Contact
Versantus
David Vallance
Telephone: 01865 422112
Email: david.vallance@versantus.co.uk
Service scope
- Software add-on or extension
- Yes, but can also be used as a standalone service
- What software services is the service an extension to
- Drupal can be used as a software component within a microservices architecture.
- Cloud deployment model
- Private cloud
- Service constraints
- N/A
- System requirements
- Drupal
User support
- Email or online ticketing support
- Email or online ticketing
- Support response times
- For critical issues, our monitoring identifies issues within 60 seconds and alerts our team. We will start to fix the problem as soon as we are aware of it, and will dedicate all available resources to resolve it quickly
- User can manage status and priority of support tickets
- Yes
- Online ticketing support accessibility
- WCAG 2.1 A
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), Monday to Friday
- Web chat support
- No
- Onsite support
- Yes, at extra cost
- Support levels
-
With our flexible service packs we give you access to whatever skills you need, when you need them:
- Strategic consultancy
- Design & UX
- Development
- On-going security updates
- Search engine optimisation (SEO)
- Conversion rate optimisation (CRO)
- Pay-per-click advertising (PPC)
- Penetration testing
- Training or support
- Visual brand identity development
Service packs are priced at £950 + VAT per day, how much actual time you need will depend on your ambition and goals. We’ll discuss this further with you to understand and agree on a level that suits you alongside your chosen Drupal maintenance package. - Support available to third parties
- Yes
Onboarding and offboarding
- Getting started
-
We start with a kickoff meeting, where we gather essential information and discuss key behaviours crucial for the project's success.
Training in the Drupal CMS would typically be provided to your editorial or administration team as part of the project, and additional training is available on request.
Our project management software is easy to use, but we can provide training where required. - Service documentation
- Yes
- Documentation formats
-
- HTML
- End-of-contract data extraction
- We can provide this to you
- End-of-contract process
- Following termination, Versantus will retain customer data for 30 days. This grace period enables customers to access their content from Versantus services, provided they've settled any charges for continued service usage after termination and any outstanding payments.
Using the service
- Web browser interface
- Yes
- Supported browsers
-
- Internet Explorer 11
- Microsoft Edge
- Firefox
- Chrome
- Safari
- Opera
- Application to install
- No
- Designed for use on mobile devices
- Yes
- Differences between the mobile and desktop service
- Fully responsive web interface
- Service interface
- Yes
- User support accessibility
- WCAG 2.1 AA or EN 301 549
- Description of service interface
- Drupal CMS
- Accessibility standards
- WCAG 2.1 AA or EN 301 549
- Accessibility testing
- N/A
- API
- Yes
- What users can and can't do using the API
- All functionality can be exposed via an API.
- API documentation
- Yes
- API documentation formats
-
- HTML
- API sandbox or test environment
- Yes
- Customisation available
- Yes
- Description of customisation
- Content types and Taxonomies; Roles and permissions; Workflows; Menus/ Navigation; Custom integrations; User interface;
Scaling
- Independence of resources
-
We rely on Acquia for cloud hosting. Their service is tuned specifically for Drupal performance, resulting in faster rendering of dynamic content and improved site reliability. In creating the platform, Acquia's performance experts analysed performance characteristics and identified the configurations at each layer of the stack that make Drupal websites fast. The core of the Acquia Cloud platform is an open source LAMP server stack, combining the Linux (Ubuntu) operating system and PHP programming language with Drupal.
The Acquia platform provides burstable, elastic cloud resources that let you scale your servers on demand. Our platform continuously monitors site performance.
Analytics
- Service usage metrics
- Yes
- Metrics types
-
On request we can provide uptime metrics, support SLA performance and other metrics.
We can also provide GA4 advanced tracking setup and custom reports allowing you to review website performance. - Reporting types
-
- Real-time dashboards
- Reports on request
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Other security clearance
- Government security clearance
- Up to Baseline Personnel Security Standard (BPSS)
Asset protection
- Knowledge of data storage and processing locations
- Yes
- Data storage and processing locations
-
- United Kingdom
- European Economic Area (EEA)
- Other locations
- User control over data storage and processing locations
- Yes
- Datacentre security standards
- Managed by a third party
- Penetration testing frequency
- At least every 6 months
- Penetration testing approach
- Another external penetration testing organisation
- Protecting data at rest
-
- Physical access control, complying with CSA CCM v3.0
- Physical access control, complying with SSAE-16 / ISAE 3402
- Physical access control, complying with another standard
- Encryption of all physical media
- Scale, obfuscating techniques, or data storage sharding
- Data sanitisation process
- Yes
- Data sanitisation type
-
- Explicit overwriting of storage before reallocation
- Deleted data can’t be directly accessed
- Equipment disposal approach
- A third-party destruction service
Data importing and exporting
- Data export approach
- Users with admin access to the Drupal CMS are able to export data directly.
- Data export formats
- CSV
- Data import formats
- CSV
Data-in-transit protection
- Data protection between buyer and supplier networks
-
- Private network or public sector network
- TLS (version 1.2 or above)
- IPsec or TLS VPN gateway
- Other
- Other protection between networks
- SSH is available
- Data protection within supplier network
-
- TLS (version 1.2 or above)
- Other
- Other protection within supplier network
- SSH or TLS connections between internal systems, sanitised data used for testing, data is encrypted at rest.
Availability and resilience
- Guaranteed availability
- Availability SLA is 99.95%. Failure to meet agreed level of availability will result in service credits awarded to the customer.
- Approach to resilience
-
Enterprise customers achieve high availability by using multiple availability zones in one region with redundant servers serving each layer of the technology stack: extra web servers operating round-robin, including reserve capacity in the second availability zone; a fully redundant file system in the second availability zone that is constantly syncing; master-master replication for database pairs; multiple dedicated Memcache servers; and a secondary load balancer in a redundant environment. Acquia Cloud also offers automatic nightly and on-demand backups and restores.
Our Operations team will scale your resources up to meet predictable and unpredictable traffic spikes for any period of time, and then return resources back to normal levels when traffic subsides. Furthermore, when resource usage rises, our experts investigate why instead of immediately throwing more hardware at the problem. As a result, we often prevent customers from having to upsize. This allows you to pay only for the resources you need. - Outage reporting
- https://status.acquia.com/ and subscribable email alerts
Identity and authentication
- User authentication needed
- Yes
- User authentication
-
- 2-factor authentication
- Public key authentication (including by TLS client certificate)
- Identity federation with existing provider (for example Google Apps)
- Username or password
- Access restrictions in management interfaces and support channels
- MFA (e.g. Username/password plus SMS or email code), or federated log-in
- Access restriction testing frequency
- At least every 6 months
- Management access authentication
-
- 2-factor authentication
- Identity federation with existing provider (for example Google Apps)
- Username or password
Audit information for users
- Access to user activity audit information
- Users contact the support team to get audit information
- How long user audit data is stored for
- User-defined
- Access to supplier activity audit information
- Users contact the support team to get audit information
- How long supplier audit data is stored for
- User-defined
- How long system logs are stored for
- Between 1 month and 6 months
Standards and certifications
- ISO/IEC 27001 certification
- No
- ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Cyber essentials plus
- No
- Other security certifications
- No
Security governance
- Named board-level person responsible for service security
- Yes
- Security governance certified
- Yes
- Security governance standards
- Other
- Other security governance standards
- Cyber Essentials
- Information security policies and processes
- Versantus sets up clear rules and procedures documented for everyone to follow, ensuring things run smoothly and securely. These guidelines cover what needs to be done, who does it, and how. They're kept in an easy-to-find place for all staff. Leaders are actively involved, giving direction and backing for security efforts. Leaders review and decide on things like making security better, updating risk plans, adjusting procedures based on what's happening, figuring out what resources are needed, and making sure our security measures are working well. These rules are reviewed and approved by the leadership team at least once per year or whenever there's a large change.
Operational security
- Configuration and change management standard
- Supplier-defined controls
- Configuration and change management approach
-
Changes to Versantus services and features follow secure software development practices, including security risk reviews prior to launch. Developer access to production environments is limited, centrally controlled, and only granted where needed.
Production changes are reviewed, tested, and managed through a configuration management process that gives full audit capability and the option to roll back where needed. - Vulnerability management type
- Supplier-defined controls
- Vulnerability management approach
- We use OSSEC for intrusion detection, undertake regular penetration testing using certified 3rd-party suppliers, and monitor CVEs and similar issues through the appropriate mailing lists.
- Protective monitoring type
- Supplier-defined controls
- Protective monitoring approach
-
Potential compromises are identified via OSSEC and other system-level monitoring, including regular log reviews. Malware and virus scanning is installed on all systems
Incident response planning is undertaken by the leadership team and reviewed at least annually. Incident response times will vary according to severity, which is judged in the early stages of detection. - Incident management type
- Supplier-defined controls
- Incident management approach
-
Incidents are handled via our helpdesk. After an incident is identified, it is verified and classified for severity. It is then assigned for investigation and if appropriate is escalated to the leadership team.
Throughout investigation and resolution, the incident log is updated in the helpdesk software and customers are kept informed.
After resolution, the customer can sign off acceptance, or request further action.
Secure development
- Approach to secure software development best practice
- Conforms to a recognised standard, but self-assessed
Public sector networks
- Connection to public sector networks
- No
Social Value
- Social Value
-
Social Value
- Fighting climate change
- Covid-19 recovery
- Tackling economic inequality
- Equal opportunity
- Wellbeing
Fighting climate change
Versantus are working towards net zero/ carbon neutrality. Our policies and procedures aim to influence our team, client and supply partners to consider and minimise the environmental impact of our activities.Covid-19 recovery
Versantus have implemented additional staff services to support the mental health of the team in light of COVID-19 and the impact it has had on wellbeing. We have also invested in additional facilities and workplace conditions that support the COVID-19 recovery effort including effective social distancing and hybrid working arrangements. This includes facilitating remote working and encouraging our team to make the most of our global offices toTackling economic inequality
Versanuts strive to create a diverse working environment which includes seeking candidates from different social and economic backgrounds. We promote retraining for people re-entering the workforce and we work with our client partners to explore opportunities for training and development of their teams and communities. Additionally, we ensure to pay all employees the Oxford Living Wage, with the flexibility to work from home to further ensure everyone is able to work comfortably at Versantus. Additionally, we are proud to offer salary transparency through published and communicated pay scales for each role within our team, alongside the requirements to meet each level of pay and responsibility. This ensures we are proactively fostering transparency that eliminates the potential for discriminatory pay distribution.Equal opportunity
Versantus believe that policies alone are not enough to build an inclusive culture or workplace and that promoting diversity shouldn’t be a box-ticking exercise. At Versantus, it is about ensuring that no one feels left out, excluded or undermined because of their age, disability, gender reassignment, race, religion or belief, sex, sexual orientation, marriage/ civil partnership, pregnancy and maternity, or factors such as social background. Versantus actively promotes an inclusive working environment which allows and encourages people to be themselves at work. This means creating a culture where discrimination is eliminated, and an environment of equal opportunities where everyone recognises the positive contribution a diverse workforce and community can make.Wellbeing
Versantus strives to support the health and wellbeing of the team, including physical and mental health, through the facilities we provide and benefits we offer. For example, everyone is entitled to join the company health plan which provides a mental health service that gives everyone access to self help and counselling experts. We recognise that many of our team members have conflicting personal responsibilities that need to be managed alongside their work responsibilities. This is why we offer flexible working hours, extended maternity and paternity leave and private healthcare to support our team as much as possible inside and outside of work. This approach has resulted in our recognition as a Great Place to Work.
Pricing
- Price
- £950 a unit a day
- Discount for educational organisations
- No
- Free trial available
- Yes
- Description of free trial
- Bespoke to requirements