Skip to main content

Help us improve the Digital Marketplace - send your feedback

Versantus

Drupal migrations

Versantus Drupal Cloud CMS is a secure, compliant Drupal content management system, providing complex Drupal integration, single sign-on, CRM, configuration and workflow management.

Versantus are Drupal migration specialists and can help with migrating from previous versions such as Drupal 7, 8 and 9, or moving to Drupal from other platforms.

Features

  • Drupal best practice implementation
  • Expert Drupal module evaluation based on requirements
  • Drupal migrations
  • Customisable responsive Drupal template design
  • Drupal Multilingual Capability
  • Drupal publishing workflows and content versioning
  • Drupal development using agile methodology
  • Headless Drupal
  • Drupal Consultancy
  • Drupal app development

Benefits

  • Drupal security compliant
  • Fully managed Drupal hosting on Acquia
  • Thousands of Drupal Association approved modules
  • UK based expert Drupal Development team
  • Certified Drupal Experts
  • Acquia Preferred Partner
  • Drupal Association Supporting Partner

Pricing

£950 a unit a day

  • Free trial available

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at david.vallance@versantus.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

1 6 9 4 9 6 7 7 6 9 9 5 6 9 7

Contact

Versantus David Vallance
Telephone: 01865 422112
Email: david.vallance@versantus.co.uk

Service scope

Software add-on or extension
Yes, but can also be used as a standalone service
What software services is the service an extension to
Drupal can be used as a software component within a microservices architecture.
Cloud deployment model
Private cloud
Service constraints
N/A
System requirements
Drupal

User support

Email or online ticketing support
Email or online ticketing
Support response times
For critical issues, our monitoring identifies issues within 60 seconds and alerts our team. We will start to fix the problem as soon as we are aware of it, and will dedicate all available resources to resolve it quickly
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
WCAG 2.1 A
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
No
Onsite support
Yes, at extra cost
Support levels
With our flexible service packs we give you access to whatever skills you need, when you need them:
- Strategic consultancy
- Design & UX
- Development
- On-going security updates
- Search engine optimisation (SEO)
- Conversion rate optimisation (CRO)
- Pay-per-click advertising (PPC)
- Penetration testing
- Training or support
- Visual brand identity development

Service packs are priced at £950 + VAT per day, how much actual time you need will depend on your ambition and goals. We’ll discuss this further with you to understand and agree on a level that suits you alongside your chosen Drupal maintenance package.
Support available to third parties
Yes

Onboarding and offboarding

Getting started
We start with a kickoff meeting, where we gather essential information and discuss key behaviours crucial for the project's success.

Training in the Drupal CMS would typically be provided to your editorial or administration team as part of the project, and additional training is available on request.

Our project management software is easy to use, but we can provide training where required.
Service documentation
Yes
Documentation formats
  • HTML
  • PDF
End-of-contract data extraction
We can provide this to you
End-of-contract process
Following termination, Versantus will retain customer data for 30 days. This grace period enables customers to access their content from Versantus services, provided they've settled any charges for continued service usage after termination and any outstanding payments.

Using the service

Web browser interface
Yes
Supported browsers
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
Application to install
No
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
Fully responsive web interface
Service interface
Yes
User support accessibility
WCAG 2.1 AA or EN 301 549
Description of service interface
Drupal CMS
Accessibility standards
WCAG 2.1 AA or EN 301 549
Accessibility testing
N/A
API
Yes
What users can and can't do using the API
All functionality can be exposed via an API.
API documentation
Yes
API documentation formats
  • HTML
  • PDF
API sandbox or test environment
Yes
Customisation available
Yes
Description of customisation
Content types and Taxonomies; Roles and permissions; Workflows; Menus/ Navigation; Custom integrations; User interface;

Scaling

Independence of resources
We rely on Acquia for cloud hosting. Their service is tuned specifically for Drupal performance, resulting in faster rendering of dynamic content and improved site reliability. In creating the platform, Acquia's performance experts analysed performance characteristics and identified the configurations at each layer of the stack that make Drupal websites fast. The core of the Acquia Cloud platform is an open source LAMP server stack, combining the Linux (Ubuntu) operating system and PHP programming language with Drupal.

The Acquia platform provides burstable, elastic cloud resources that let you scale your servers on demand. Our platform continuously monitors site performance.

Analytics

Service usage metrics
Yes
Metrics types
On request we can provide uptime metrics, support SLA performance and other metrics.

We can also provide GA4 advanced tracking setup and custom reports allowing you to review website performance.
Reporting types
  • Real-time dashboards
  • Reports on request

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Other security clearance
Government security clearance
Up to Baseline Personnel Security Standard (BPSS)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
User control over data storage and processing locations
Yes
Datacentre security standards
Managed by a third party
Penetration testing frequency
At least every 6 months
Penetration testing approach
Another external penetration testing organisation
Protecting data at rest
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
Data sanitisation process
Yes
Data sanitisation type
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
Equipment disposal approach
A third-party destruction service

Data importing and exporting

Data export approach
Users with admin access to the Drupal CMS are able to export data directly.
Data export formats
CSV
Data import formats
CSV

Data-in-transit protection

Data protection between buyer and supplier networks
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
Other protection between networks
SSH is available
Data protection within supplier network
  • TLS (version 1.2 or above)
  • Other
Other protection within supplier network
SSH or TLS connections between internal systems, sanitised data used for testing, data is encrypted at rest.

Availability and resilience

Guaranteed availability
Availability SLA is 99.95%. Failure to meet agreed level of availability will result in service credits awarded to the customer.
Approach to resilience
Enterprise customers achieve high availability by using multiple availability zones in one region with redundant servers serving each layer of the technology stack: extra web servers operating round-robin, including reserve capacity in the second availability zone; a fully redundant file system in the second availability zone that is constantly syncing; master-master replication for database pairs; multiple dedicated Memcache servers; and a secondary load balancer in a redundant environment. Acquia Cloud also offers automatic nightly and on-demand backups and restores.

Our Operations team will scale your resources up to meet predictable and unpredictable traffic spikes for any period of time, and then return resources back to normal levels when traffic subsides. Furthermore, when resource usage rises, our experts investigate why instead of immediately throwing more hardware at the problem. As a result, we often prevent customers from having to upsize. This allows you to pay only for the resources you need.
Outage reporting
https://status.acquia.com/ and subscribable email alerts

Identity and authentication

User authentication needed
Yes
User authentication
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
Access restrictions in management interfaces and support channels
MFA (e.g. Username/password plus SMS or email code), or federated log-in
Access restriction testing frequency
At least every 6 months
Management access authentication
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

Access to user activity audit information
Users contact the support team to get audit information
How long user audit data is stored for
User-defined
Access to supplier activity audit information
Users contact the support team to get audit information
How long supplier audit data is stored for
User-defined
How long system logs are stored for
Between 1 month and 6 months

Standards and certifications

ISO/IEC 27001 certification
No
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Cyber essentials
Yes
Cyber essentials plus
No
Other security certifications
No

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
Other
Other security governance standards
Cyber Essentials
Information security policies and processes
Versantus sets up clear rules and procedures documented for everyone to follow, ensuring things run smoothly and securely. These guidelines cover what needs to be done, who does it, and how. They're kept in an easy-to-find place for all staff. Leaders are actively involved, giving direction and backing for security efforts. Leaders review and decide on things like making security better, updating risk plans, adjusting procedures based on what's happening, figuring out what resources are needed, and making sure our security measures are working well. These rules are reviewed and approved by the leadership team at least once per year or whenever there's a large change.

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
Changes to Versantus services and features follow secure software development practices, including security risk reviews prior to launch. Developer access to production environments is limited, centrally controlled, and only granted where needed.

Production changes are reviewed, tested, and managed through a configuration management process that gives full audit capability and the option to roll back where needed.
Vulnerability management type
Supplier-defined controls
Vulnerability management approach
We use OSSEC for intrusion detection, undertake regular penetration testing using certified 3rd-party suppliers, and monitor CVEs and similar issues through the appropriate mailing lists.
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
Potential compromises are identified via OSSEC and other system-level monitoring, including regular log reviews. Malware and virus scanning is installed on all systems

Incident response planning is undertaken by the leadership team and reviewed at least annually. Incident response times will vary according to severity, which is judged in the early stages of detection.
Incident management type
Supplier-defined controls
Incident management approach
Incidents are handled via our helpdesk. After an incident is identified, it is verified and classified for severity. It is then assigned for investigation and if appropriate is escalated to the leadership team.

Throughout investigation and resolution, the incident log is updated in the helpdesk software and customers are kept informed.

After resolution, the customer can sign off acceptance, or request further action.

Secure development

Approach to secure software development best practice
Conforms to a recognised standard, but self-assessed

Public sector networks

Connection to public sector networks
No

Social Value

Social Value

Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

Fighting climate change

Versantus are working towards net zero/ carbon neutrality. Our policies and procedures aim to influence our team, client and supply partners to consider and minimise the environmental impact of our activities.

Covid-19 recovery

Versantus have implemented additional staff services to support the mental health of the team in light of COVID-19 and the impact it has had on wellbeing. We have also invested in additional facilities and workplace conditions that support the COVID-19 recovery effort including effective social distancing and hybrid working arrangements. This includes facilitating remote working and encouraging our team to make the most of our global offices to

Tackling economic inequality

Versanuts strive to create a diverse working environment which includes seeking candidates from different social and economic backgrounds. We promote retraining for people re-entering the workforce and we work with our client partners to explore opportunities for training and development of their teams and communities. Additionally, we ensure to pay all employees the Oxford Living Wage, with the flexibility to work from home to further ensure everyone is able to work comfortably at Versantus. Additionally, we are proud to offer salary transparency through published and communicated pay scales for each role within our team, alongside the requirements to meet each level of pay and responsibility. This ensures we are proactively fostering transparency that eliminates the potential for discriminatory pay distribution.

Equal opportunity

Versantus believe that policies alone are not enough to build an inclusive culture or workplace and that promoting diversity shouldn’t be a box-ticking exercise. At Versantus, it is about ensuring that no one feels left out, excluded or undermined because of their age, disability, gender reassignment, race, religion or belief, sex, sexual orientation, marriage/ civil partnership, pregnancy and maternity, or factors such as social background. Versantus actively promotes an inclusive working environment which allows and encourages people to be themselves at work. This means creating a culture where discrimination is eliminated, and an environment of equal opportunities where everyone recognises the positive contribution a diverse workforce and community can make.

Wellbeing

Versantus strives to support the health and wellbeing of the team, including physical and mental health, through the facilities we provide and benefits we offer. For example, everyone is entitled to join the company health plan which provides a mental health service that gives everyone access to self help and counselling experts. We recognise that many of our team members have conflicting personal responsibilities that need to be managed alongside their work responsibilities. This is why we offer flexible working hours, extended maternity and paternity leave and private healthcare to support our team as much as possible inside and outside of work. This approach has resulted in our recognition as a Great Place to Work.

Pricing

Price
£950 a unit a day
Discount for educational organisations
No
Free trial available
Yes
Description of free trial
Bespoke to requirements

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at david.vallance@versantus.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.