Skip to main content

Help us improve the Digital Marketplace - send your feedback

GET SWARMS LIMITED

Amazon Aurora

GetSwarms offers Amazon Aurora, a fully managed relational database service compatible with MySQL and PostgreSQL. We provide high performance, scalability, and durability, with automatic failover, replication, and backup features. Aurora is designed to deliver fast performance and low latency for mission-critical applications, ensuring reliability and efficiency in AWS environments.

Features

  • Compatible with MySQL and PostgreSQL, allowing easy migration from existing
  • Optimized for performance, delivering faster query execution and lower latency
  • Scales seamlessly to accommodate growing workloads without downtime or performance
  • Data is replicated across multiple Availability Zones for high availability
  • Built-in automatic failover ensures continuous availability in the event of
  • Automated backups and point-in-time recovery features enable easy restoration of
  • Provides encryption at rest and in transit, as well as
  • Fully managed with routine maintenance tasks such as patching and
  • Replicate across multiple regions, enabling low-latency global reads and disaster
  • Help identify and resolve performance bottlenecks.

Benefits

  • Enabling automatic storage scaling, up to 64TB per instance.
  • Supporting up to 15 read-replicas across multiple Availability Zones.
  • Delivering up to 5x faster performance compared to standard MySQL
  • Facilitating easy migration of existing MySQL databases using standard tools.
  • Achieving up to 3x faster performance compared to standard PostgreSQL
  • Seamless integration with other AWS services (24x7 support and consolidated
  • Ensuring comprehensive, cross-service API audit logging and security (CloudTrail).
  • Designed to maintain greater than 99.99% availability.
  • Implementing role-based access control across all AWS services (IAM).
  • Providing training and architectural patterns/guidance (well-architected).

Pricing

  • Education pricing available
  • Free trial available

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at Amit.Jain@getSwarms.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

1 7 1 8 8 1 8 8 5 0 3 4 5 4 1

Contact

GET SWARMS LIMITED Amit Jain
Telephone: 07545641528
Email: Amit.Jain@getSwarms.com

About your service

Service categories

PaaS

Data Management

  • Databases

Service scope

Service constraints
N/A
System requirements
  • A secure high speed internet
  • Modern web browser such as Safari, Chrome, Firefox, Edge etc.
Cloud deployment model
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud

User support

Email or online ticketing support
Yes
Support response times
Support response times

We provide 24x7 prioritised service for the customer technical support staff. Our response times are as follows: P1: CRITICAL - 15 mins P2: URGENT - 1 Hour P3: IMPORTANT - 3 Hrs P4: COSMETIC/MINOR - 1 Day
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
WCAG 2.2 AAA
Phone support
Yes
Phone support availability
24 hours, 7 days a week
Web chat support
Yes
Web chat support availability
24 hours, 7 days a week
Web chat support accessibility standard
WCAG 2.2 AAA
Web chat accessibility testing
Accessibility Testing, Functional Testing, UAT Testing
Onsite support
Yes
Support levels
We provide a dedicated Technical Account Manager for the duration of contract who serves as an escalation point for any service-related issues. Additionally, we can offer Level 1, 2 and 3 support depending on the needs of our clients. Cost will vary depending upon the required service levels.
Support available to third parties
Yes
AI chatbot
Yes

Onboarding and offboarding

Getting started
There are online how-to videos, extensive help guides, documentation, community forums, comments, support desk available for users. The GUI itself is quite intuitive. We can provide onsite training at an extra cost.
Service documentation
Yes
Documentation formats
  • HTML
  • ODF
  • PDF
End-of-contract data extraction
All the data of a user or organisation in any service reside in their own namespace. This is deliberately designed this way from ground up to maximise user control on their information. They can download all the info pertaining to them. Also they can raise SAR requests as per GDPR if required. At the end of the contract, data is provided to the user/organisation as per data retention policies, legal frameworks and their requirements
End-of-contract process
Buyer may terminate the relationship with Supplier for any reason by (i) providing Supplier with notice and (ii) closing Buyers account for all services for which Supplier provide an account closing mechanism. Buyers pay for the services they use to the point of account termination. Supplier customers retain control and ownership of their data. Supplier will not erase customer data for 30 days following an account termination. This allows customers to retrieve content from Supplier services so long as the customer has paid any charges for any post-termination use of the service offerings and all other amounts due.
Documentation accessibility standard
WCAG 2.2 AAA

Using the service

Web browser interface
Yes
Using the web interface
Add some details
Web interface accessibility standard
WCAG 2.2 AAA
Web interface accessibility testing
Add some details
API
Yes
What users can and can't do using the API
No limitations - API is fully secure, user can authenticate using various mechanisms. Users can use API keys or their login info to authenticate. The API offers full CRUD operations. There is a SWAGGER UI available to help users understand API better.
API automation tools
  • Ansible
  • Chef
  • OpenStack
  • SaltStack
  • Terraform
  • Puppet
API documentation
Yes
API documentation formats
  • Open API (also known as Swagger)
  • HTML
  • ODF
  • PDF
Command line interface
Yes
Command line interface compatibility
  • Linux or Unix
  • Windows
  • MacOS
Using the command line interface
Add some details

Scaling

Independence of resources
The app is built on auto-scalable infrastructure and will automatically expand to use more instances/storage/memory when it experiences additional load
Usage notifications
Yes
Usage reporting
  • API
  • Email
  • SMS
Optimising consumption
Yes
Automatic scaling
Yes

Analytics

Infrastructure or application metrics
Yes
Metrics types
  • CPU
  • Disk
  • HTTP request and response status
  • Memory
  • Network
  • Number of active instances
Reporting types
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request
Resource tagging
Yes
FOCUS resource tagging
Yes

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Conforms to BS7858:2019
Government security clearance
Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
User control over data storage and processing locations
Yes
Datacentre security standards
Complies with a recognised standard (for example CSA CCM version 4.0)
Penetration testing frequency
At least every 6 months
Penetration testing approach
‘IT Health Check’ performed by a CHECK service provider
Protecting data at rest
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
Data sanitisation process
Yes
Equipment disposal approach
Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
Data sanitisation type
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Backup and recovery

Backup controls
Add some details
Datacentre setup
Multiple datacentres with disaster recovery
Scheduling backups
Users schedule backups through a web interface
Backup recovery
Users can recover backups themselves, for example through a web interface
Backup and recovery
Yes
RPO/RTO
Yes

Data-in-transit protection

Data protection between buyer and supplier networks
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)
Data protection within supplier network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)

Availability and resilience

Guaranteed availability
We provide 99.99% SLA for availability of our services. We are available on Multi-Cloud therefore please also check SLAs below pertaining to your chosen cloud. AWS provided here for Azure/GCP check their SLA: AWS currently provides SLAs for several services. Due to the rapidly evolving nature of AWS’s product offerings, SLAs are best reviewed directly on our website via the links below: • Amazon EC2 SLA: http://aws.amazon.com/ec2-sla/ • Amazon S3 SLA: http://aws.amazon.com/s3-sla • Amazon CloudFront SLA: http://aws.amazon.com/cloudfront/sla/ • Amazon Route 53 SLA: http://aws.amazon.com/route53/sla/ • Amazon RDS SLA: http://aws.amazon.com/rds-sla/ • AWS Shield Advanced SLA: https://aws.amazon.com/shield/sla/ Well-architected solutions on AWS that leverage AWS Service SLA’s and unique AWS capabilities such as multiple Availability Zones, can ease the burden of achieving specific SLA requirements.
Approach to resilience
This information is available on request. For quick reference, we use auto-scaling with multi-AZ, multi-region deployments. We are using AWS cloud. Also see AWS services resilience approach below: The AWS Business Continuity plan details the process that AWS follows in the case of an outage, from detection to deactivation. AWS has developed a three-phased approach: Activation and Notification Phase, Recovery Phase, and Reconstitution Phase. This approach ensures that AWS performs system recovery and reconstitution efforts in a methodical sequence, maximizing the effectiveness of the recovery and reconstitution efforts and minimizing system outage time due to errors and omissions. AWS maintains a ubiquitous security control environment across all regions. Each data centre is built to physical, environmental, and security standards in an active-active configuration, employing an n+1 redundancy model, ensuring system availability in the event of component failure. Components (N) have at least one independent backup component. All data centres are online and serving traffic. In case of failure, there is sufficient capacity to enable traffic to be load-balanced to the remaining sites. Customers are responsible for implementing contingency planning, training and testing for their systems hosted on AWS
Outage reporting
Publicly available dashboard; personalised dashboard with API and events; configurable alerting (email / SMS / messaging)

Identity and authentication

User authentication needed
Yes
User authentication
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password
Access restrictions in management interfaces and support channels
The Identity and Access Management (IAM) module ensures controlled user access to our services, APIs, and resources. It incorporates various parameters like time, IP address, SSL usage, and multi-factor authentication (MFA) for authorized users. Customers sign API calls with their Secret Access Key, which could be either the root Account’s or a user's created through IAM. Without access to this key, customers' API calls cannot be executed. API calls are further secured via TLS/SSL encryption, ensuring confidentiality. Additionally, customers have the option to utilize TLS/SSL-protected API endpoints for enhanced security measures.
Access restriction testing frequency
At least every 6 months
Management access authentication
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password
Devices users manage the service through
  • Dedicated device on a segregated network (providers own provision)
  • Any device but through a bastion host (a bastion host is a server that provides access to a private network from an external network such as the internet)
  • Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
User-defined
Access to supplier activity audit information
Users have access to real-time audit information
How long supplier audit data is stored for
User-defined
How long system logs are stored for
User-defined

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
  • CSA CSM version 4.0
  • ISO/IEC 27001
Information security policies and processes
Get Swarms follows a formal set of information security policies aligned to ISO/IEC 27001, UK GDPR, and NCSC Cyber Assessment Framework (CAF) principles. These include policies for Information Security, Access Control, Data Protection, Secure Development, Incident Management, Supplier Security, Business Continuity, and Acceptable Use. Overall accountability for information security sits with senior management. Day-to-day responsibility is delegated to a designated security lead, with clear escalation routes for incidents, risks, and policy breaches. Security risks, vulnerabilities, and incidents are logged, assessed, and tracked to closure through defined risk and incident management processes. Policies are embedded into operational delivery through mandatory on boarding training, regular refresher awareness, role-based access controls, and secure-by-design delivery practices. Technical controls include least-privilege access, environment segregation, encryption in transit and at rest, audit logging, vulnerability management, and regular patching. Compliance is assured through periodic internal reviews, third-party security testing where appropriate (e.g. penetration testing), supplier assurance checks, and management oversight. Any non-conformities are formally recorded with corrective actions and ownership assigned. These controls ensure that information security policies are consistently applied, monitored, and continuously improved across Get Swarms’ operations and client engagements.

Operational security

Configuration and change management standard
Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
Configuration and change management approach
Changes to our services and features follow secure software development practices, including security risk reviews prior to launch. Developer access to production environments is via explicit access system requests, subject to owner review and authorisation. Teams set bespoke change management standards per service, underpinned by standard guidelines. All production environment changes are reviewed, tested and approved. Stages include design, documentation, implementation (including rollback procedures), testing (non-production environment), peer to peer review (business impact/technical rigour/code), final approval by authorised party. Emergency changes follow incident response procedures.
Vulnerability management type
Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
Vulnerability management approach
Security team performs vulnerability scans on the host operating system, web applications, and databases in the AWS environment. Approved 3rd party vendors conduct external assessments (minimum frequency: quarterly). Identified vulnerabilities are monitored and evaluated. Countermeasures are designed and implemented to neutralise known/newly identified vulnerabilities. Our underlying cloud e.g. AWS Security monitors newsfeeds/vendor sites for patches and receives customer intelligence via http://aws.amazon.com/security/vulnerability-reporting/. We are responsible for all scanning, penetration testing, file integrity monitoring and intrusion detection for our Amazon EC2 and Amazon ECS instances/ applications and other services.
Protective monitoring type
Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
Protective monitoring approach
We deploy (pan-environmental) monitoring devices to collect information on unauthorized intrusion attempts, usage abuse, and network/application bandwidth usage. Devices monitor: • Port scanning attacks • Usage (CPU, processes, disk utilization, swap rates, software-error generated losses) • Application metrics • Unauthorized connection attempts Near real-time alerts flag incidents, based on AWS Service/Security Team- set thresholds. Requests to AWS KMS are logged and visible via the account’s AWS CloudTrail Amazon S3 bucket. Logs provide request information, under which CMK,and identify the AWS resource protected through the CMK use.
Incident management type
Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
Incident management approach
We adopt a three-phased approach to manage incidents: 1. Activation and Notification Phase 2. Recovery Phase 3. Reconstitution Phase To ensure the effectiveness of the Incident Management plan, conducts incident response testing, providing excellent coverage for the discovery of defects and failure modes as well as testing the systems for potential customer impact. The Incident Response Test Plan is executed annually, in conjunction with the Incident Response plan. It includes multiple scenarios, potential vectors of attack, the inclusion of the systems integrator in reporting and coordination and varying reporting/detection avenues.
Post-quantum cryptography secure
Yes

Secure development

Approach to secure software development best practice
Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Separation between users

Virtualisation technology used to keep applications and users sharing the same infrastructure apart
Yes
Who implements virtualisation
Third-party
Third-party virtualisation provider
AWS, Google, Azure
How shared infrastructure is kept separate
Different organisations sharing the same infrastructure are kept apart through logical and technical isolation controls provided by the cloud platform. Each organisation operates within its own isolated tenant/account, with strict separation of compute, storage, and networking resources. Network isolation is enforced using virtual private networks (VPCs), subnets, security groups, and firewalls. Data is segregated at rest and in transit using tenant-specific encryption keys and access controls. Identity and access management (IAM) ensures users and services can only access authorised resources. The underlying hypervisor and cloud control plane prevent cross-tenant access, ensuring confidentiality, integrity, and availability between organisations.

Energy efficiency

Energy-efficient datacentres
Yes
Description of energy efficient datacentres
Our datacentres are operated in alignment with the EU Code of Conduct for Energy Efficient Datacentres and its best-practice principles. We actively monitor and manage energy consumption across compute, storage, networking, and supporting infrastructure, with a strong focus on efficiency, resilience, and sustainability. Key measures include the use of energy-efficient hardware, virtualisation and consolidation to maximise utilisation, and continuous monitoring of power and cooling performance (including PUE metrics where available). Cooling systems are optimised through hot/cold aisle containment, temperature set-point optimisation, and the use of free-air or efficient cooling technologies where feasible. Power management features are enabled at both hardware and platform levels, including dynamic resource scaling, workload scheduling, and automated shutdown of unused resources. Environmental performance is reviewed regularly, and efficiency improvements are incorporated as part of ongoing capacity planning and infrastructure refresh cycles. Where third-party hyperscale or colocation providers are used, we select providers that publicly commit to the EU Code of Conduct or equivalent energy-efficiency standards and sustainability frameworks. This ensures that our services are delivered in a manner consistent with EU best practice for energy-efficient and environmentally responsible datacentre operations.

Pricing

Discount for educational organisations
Yes
Free trial available
Yes
Description of free trial
The free version offers limited access for evaluation, including core UI, basic configuration, templates and restricted API use. Advanced modules, AI, integrations, hosting, SSO and support are excluded. It is available as a 14–30 day trial, after which customers can upgrade to full functionality and support.

Discount

Provide your minimum discount applicable to your baseline prices
5%

Formula for calculating price of your services

Formula for calculating price of your services

Which of the core deployment models you intend to offer

  • Public Cloud
  • Private Cloud

Public Cloud - Formula for calculating price of your services


Total Cost
The Total Cost for a buyer's call off requirement in a Public Cloud Deployment
=
Baseline Pricing
Baseline infrastructure pricing is provided at-cost, based on the live public list prices of the selected cloud vendor (e.g., AWS, Azure, GCP, or Oracle). These prices represent the core consumption rates before any managed service fees or markups are applied. primary vendor link (e.g., https://aws.amazon.com/pricing/ or https://azure.microsoft.com/en-gb/pricing/).
Baseline Pricing - Web link
https://aws.amazon.com/pricing/
-
Minimum Discounting
5%
+
Onboarding Activity
Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process
+
Additional sources of cost
Monthly charges include a fixed £500.00 Cloud Management Fee and a 5% Infrastructure Management Markup on total monthly vendor consumption. Mandatory vendor support plans (e.g., AWS Business Support) are passed through at the vendor's official list price.
-
Additional sources of cost reduction
Buyers can reduce infrastructure costs through vendor-native commitments (e.g., AWS Savings Plans or Reserved Instances). We offer a volume discount on our Cloud Management Fee: 2.5% for annual spend over £100k and 5% for spend over £500k and an automatic 2% for registered Educational and Non-Profit bodies.

Private Cloud - Formula for calculating price of your services


Total Cost
The Total Cost for a buyer's call off requirement in a Private Cloud Deployment
=
Baseline Pricing
Baseline infrastructure pricing is provided at-cost, based on the live public list prices of the selected cloud vendor (e.g., AWS, Azure, GCP, or Oracle). These prices represent the core consumption rates before any managed service fees or markups are applied. primary vendor link (e.g., https://aws.amazon.com/pricing/ or https://azure.microsoft.com/en-gb/pricing/).
-
Minimum Discounting
5%
+
Onboarding Activity
Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process
+
Additional sources of cost
Monthly charges include a fixed £500.00 Cloud Management Fee and a 5% Infrastructure Management Markup on total monthly vendor consumption. Mandatory vendor support plans (e.g., AWS Business Support) are passed through at the vendor's official list price
-
Additional sources of cost reduction
Buyers can reduce infrastructure costs through vendor-native commitments (e.g., AWS Savings Plans or Reserved Instances). We offer a volume discount on our Cloud Management Fee: 2.5% for annual spend over £100k and 5% for spend over £500k and an automatic 2% for registered Educational and Non-Profit bodies.

Mandatory certifications

Mandatory certifications

Are you are bidding to offer IaaS and/or PaaS as a reseller or are you in sole control of the infrastructure

Reseller

Cloud service suppliers you intend to resell with evidence

Organisation 1

Organisation name

Amazon Web Services (AWS)

Website address/upload for organisation

Website address

Website address

https://aws.amazon.com/marketplace/seller-profile?id=seller-sb4bavf23ibwc

Organisation 2

Organisation name

Microsoft

Website address/upload for organisation

Website address

Website address

https://marketplace.microsoft.com/en-us/marketplace/partner-dir/af17128d-f3a0-4cd4-85f4-7b162df29aa9/overview

Organisation 3

Organisation name

Google Cloud (Google Ireland Limited)

Website address/upload for organisation

Website address

Website address

https://cloud.google.com/find-a-partner

ISO 9001 certification

Provided

ISO 27001 certification

Provided

ISO 20000-1 certification

Provided

Are you reliant on the Cloud Service Provider for some accreditations

Yes

Cyber Essentials

Do you have a Cyber Essentials Plus certificate?
Yes
Cyber Essentials Plus certificate Number
13eac52b-45a5-4212-86ee-ca3e04e265b1

Non-mandatory Standards and certifications

ISO 28000:2022 certification
No
Quality management systems (QMS)
Yes
CSA STAR certification
No
PCI certification
No
Other security certifications
No

Social value

Section B - Commitment for Future: Delivery
  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at Amit.Jain@getSwarms.com. Tell them what format you need. It will help if you say what assistive technology you use.