CATAPULT CX LIMITED

Atlassian Licensing Jira, Confluence, Service Management, BitBucket

As an Atlassian Official Solution Partner, we procure your Atlassian licenses for you, making sure you get the best deal available . We co-term and manage your entire Atlassian estate under one agreement. We offer full, flexible invoice terms, rather credit-card payment.
Keep informed: learn about updates and new products

Features

• Jira, Confluence, JSM, and Bitbucket licence assessment
• User tier and edition optimisation
• Pay Atlassian licences via invoice
• Permission and access model review
• Licence consolidation across instances
• Co-terming licences to a single renewal date
• Cloud versus Data Center comparison and migrations
• Forecasting for growth and team changes
• Active and inactive user analysis
• Clear licensing governance recommendations

Benefits

• Reduced Atlassian licensing costs
• Simplified renewals through licence co-terming
• Improved cashflow using invoice-based payments
• Better alignment between licences and actual usage
• Avoidance of over-licensed user tiers
• Improved compliance and audit confidence
• Clear understanding of future licence needs
• Lower risk during renewals and upgrades
• Better value from existing Atlassian investment
• Predictable, manageable Atlassian licensing spend

• Education pricing available
• Free trial available

Service documents

• Pricing document

  ODS

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@catapult.cx. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

295188521640496

Contact

Alex Fishlock
+44 203 773 0553
info@catapult.cx

About your service

• Service categories:

  Applications

  Collaborative

  • Enterprise community
  • Team collaboration
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: Constraints are the responsibility of Atlassian.
• System requirements: None

User support

• Email or online ticketing support: No
• Phone support: No
• Web chat support: No
• Onsite support: No
• Support levels: Afdgadfga
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Initial discovery to determine requirements of usage.
• Service documentation: No
• End-of-contract data extraction: Self-service extracts.
• End-of-contract process: After the grace period access is revoked and data is deleted.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Mobile app and websupport
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: This is provided by Atlassian as standard
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: This is provided by Atlassian as standard
• API: Yes
• What users can and can't do using the API: This is provided by Atlassian as standard
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: The tools support a comprehensive customisation including things like: look and feel, workflows, forms, dashboards. This varies depending on tools. Admins and standard users have different levels of customisation available to them.

Scaling

• Independence of resources: Atlassian is responsible for this.

Analytics

• Service usage metrics: Yes
• Metrics types: Out of the box from Atlassian
• Reporting types: Real-time dashboards
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: Atlassian

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: No
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Self-service data exports
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • PDF
  • Word
  • Zip
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: 99.9% uptime SLA
• Approach to resilience: Atlassian is responsible for this.
• Outage reporting: Atlassian is responsible for this, but use Statuspage

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Atlassian is responsible for this.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: Between 1 month and 6 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: Between 1 month and 6 months
• How long system logs are stored for: Between 1 month and 6 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: ISO27001 and CyberEssentials Plus
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Atlassian is responsible for this.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Atlassian is responsible for this.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Atlassian is responsible for this.
• Incident management type: Supplier-defined controls
• Incident management approach: Atlassian is responsible for this.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Atlassian is responsible for this.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: BCI
• ISO/IEC 27001 accreditation date: Monday 11 November 2024
• What the ISO/IEC 27001 doesn’t cover: The ISMS context of the organisation is: The provision of technical consultancy, software engineering, support and maintenance of digital services. Catapults internal processes as defined are the scope of ISMS.
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: F97a46dd-c00a-479a-bba0-2245bf74e9e8
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 4b185103-94a3-4214-a769-e6c52de609b9
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
    • Ensuring accessibility to contracting and subcontracting opportunities for disabled business owners and employees
    • Collaborating with anchor institutions and community groups to make facilities available for education, training or community events

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement

Service documents

• Pricing document

  ODS

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@catapult.cx. Tell them what format you need. It will help if you say what assistive technology you use.