Skip to main content

Help us improve the Digital Marketplace - send your feedback

Paradise Computing Ltd

Paradise Hosting

Tiered hosting offering to suit all budgets

Features

  • Secure and remotely accessible
  • Fully managed

Benefits

  • Work from Home
  • Highly Available

Pricing

£165.00 to £165.00 a unit an hour

  • Education pricing available

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@paradisecomputing.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

2 1 7 8 6 2 4 4 1 9 1 0 7 9 2

Contact

Paradise Computing Ltd Jonathon Berg
Telephone: 01604 655900
Email: sales@paradisecomputing.co.uk

Service scope

Service constraints
N/A
System requirements
Internet Connection

User support

Email or online ticketing support
Yes, at extra cost
Support response times
Within 1 hour, Weekend support available for additional charge, response time 1 hour
User can manage status and priority of support tickets
No
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
No
Onsite support
Yes, at extra cost
Support levels
1st, 2nd and 3rd line support provided. All support is charged at a fixed rate of £160 per hour. Account manager provided. Subject matter experts provided depending on job.
Support available to third parties
Yes

Onboarding and offboarding

Getting started
Full scoping exercise carried out and needs assessed. Training provided onsite or online depending on requirement. Full user documentation provided end to end. Full support provided through implementation phase and after go live.
Service documentation
Yes
Documentation formats
PDF
End-of-contract data extraction
Termination activities are chargeable as detailed in SLA agreement. Requests made via normal channels and data extracted and delivered via medium of choice.
End-of-contract process
Termination activities are chargeable as detailed in SLA agreement. Notice give to account manager. Requests for data made via normal channels and data extracted and delivered via medium of choice.

Using the service

Web browser interface
No
API
No
Command line interface
No

Scaling

Scaling available
Yes
Scaling type
  • Automatic
  • Manual
Independence of resources
Datacentre Infrastructure is smartly load balanced and regularly reviewed
Usage notifications
No

Analytics

Infrastructure or application metrics
Yes
Metrics types
  • CPU
  • Disk
  • HTTP request and response status
  • Memory
  • Network
  • Number of active instances
  • Other
Other metrics
  • Service Status
  • Service up time
Reporting types
Reports on request

Resellers

Supplier type
Reseller providing extra features and support
Organisation whose services are being resold
Microsoft, Sage

Staff security

Staff security clearance
Staff screening not performed
Government security clearance
None

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
  • United Kingdom
  • European Economic Area (EEA)
User control over data storage and processing locations
Yes
Datacentre security standards
Supplier-defined controls
Penetration testing frequency
At least once a year
Penetration testing approach
In-house
Protecting data at rest
Physical access control, complying with another standard
Data sanitisation process
Yes
Data sanitisation type
Explicit overwriting of storage before reallocation
Equipment disposal approach
A third-party destruction service

Backup and recovery

Backup and recovery
Yes
What’s backed up
  • Files
  • Virtual Machines
  • Databases
  • Email
  • M365 data and documents
Backup controls
Backups are controlled via Paradise Computing. Special requests can be accommodated. Backup is provided as part of the package at no additional cost and the normal approach is to ensure all data is backed up. Retention periods are flexible.
Datacentre setup
  • Multiple datacentres with disaster recovery
  • Multiple datacentres
  • Single datacentre with multiple copies
Scheduling backups
Supplier controls the whole backup schedule
Backup recovery
Users contact the support team

Data-in-transit protection

Data protection between buyer and supplier networks
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)
Data protection within supplier network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)

Availability and resilience

Guaranteed availability
Availability/up time SLAs vary across the tiers and in some cases the resource in question.

details can be provided upon request.
Approach to resilience
Resiliency levels vary across the tiers. Data can be provided upon request.
Outage reporting
Outage reports are provided via dashboard and helpdesk email service.

Identity and authentication

User authentication
  • 2-factor authentication
  • Dedicated link (for example VPN)
  • Username or password
Access restrictions in management interfaces and support channels
Access to management interfaces and support channels are restricted to only members of the appropriate helpdesk support team. Multifactor authentication is in place for all relevant devices.
Access restriction testing frequency
At least once a year
Management access authentication
  • Dedicated link (for example VPN)
  • Username or password
Devices users manage the service through
  • Dedicated device on a segregated network (providers own provision)
  • Dedicated device on a government network (for example PSN)
  • Dedicated device over multiple services or networks
  • Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

Access to user activity audit information
Users contact the support team to get audit information
How long user audit data is stored for
User-defined
Access to supplier activity audit information
Users contact the support team to get audit information
How long supplier audit data is stored for
User-defined
How long system logs are stored for
User-defined

Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
BSI
ISO/IEC 27001 accreditation date
31/03/2022
What the ISO/IEC 27001 doesn’t cover
Non-hosting services
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Cyber essentials
No
Cyber essentials plus
No
Other security certifications
No

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
ISO/IEC 27001
Information security policies and processes
Regular review meetings and training for all staff. All staff are involved in the reporting and procedural process to ensure compliance

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
As part of ISO27001 all assets are tracked from implementation to disposal. Changes are reviewed for potential impact and affected parties informed multiple times via email before, during and after process.
Vulnerability management type
Supplier-defined controls
Vulnerability management approach
Threats are assessed by key stakeholders as part of the weekly operations meeting.
Patches are deployed regularly during standard operation but are expidited where security requires.
Information gathered from vendor, channel and MSP communities.
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
24hr remote monitoring and management in place

DR/BCP policies in place to guide response to compromise

Response time immediate depending on severity
Incident management type
Supplier-defined controls
Incident management approach
Pre-defined processes as part of our DR/BCP Policies and procedures.

Users can report incidents via the helpdesk and ticketing system.

Incident reports are provided in pdf form via email and physical copies as part of any incident review.

Secure development

Approach to secure software development best practice
Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Separation between users

Virtualisation technology used to keep applications and users sharing the same infrastructure apart
Yes
Who implements virtualisation
Supplier
Virtualisation technologies used
Hyper-V
How shared infrastructure is kept separate
Different organisations are kept apart logically using VNets and other networking technologies.

Energy efficiency

Energy-efficient datacentres
Yes
Description of energy efficient datacentres
Microsoft Azure based services adhere to the EU code of conduct and this is managed by Microsoft.

The Paradise Professional Hosting Datacentre is registered with https://sciencebasedtargets.org/
Target summary
Near term: 1.5°C by 2030

This target was approved using a streamlined target validation route exclusive to small and medium-sized enterprises (SMEs). commits to reduce scope 1 and scope 2 GHG emissions 46% by 2030 from a 2019 base year, and to measure and reduce its scope 3 emissions.

Social Value

Social Value

Social Value

  • Covid-19 recovery
  • Equal opportunity

Covid-19 recovery

By providing customers with a service which can mean companies are able to operate remotely should staff be forced to stay at home

Equal opportunity

All staff are given an equal opportunity. Applicates are all treated the same and should they be successful get the same benefits as each and every other member of staff.

Pricing

Price
£165.00 to £165.00 a unit an hour
Discount for educational organisations
Yes
Free trial available
No

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@paradisecomputing.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.