ARCHANGEL CLOUD LIMITED

Archangel Cloud aggregated platform

The service provides a cloud-based data integration platform that connects data from multiple, siloed source systems and IOT devices. It ingests, normalises, and transforms data into a consistent data set for reporting, dashboards, analytics, and automated alerts, either within the service or through integration with external business intelligence tools.

Features

• Real-time or near real time data ingestion
• Data transformation, normalisation, and enrichment across multiple sources
• Managed data model to support integration of siloed operational systems
• Configurable Alerting rules using combined data and parameters
• Secure cloud-hosted service with horizontally scalable architecture
• API-based integration with existing systems
• Real-time monitoring and alerting capabilities
• Integration-ready outputs for analytics and BI tools
• Support for lone worker safety (inactivity, man-down indicators, SOS alerts).

Benefits

• Reduce data silos across disconnected operational systems
• Gain real-time visibility across your entire organisation
• Identify risks earlier and respond faster to emerging issues
• Reduce manual data integration and custom development effort
• Improve decision-making using timely, trusted operational data
• Connect existing systems without replacing current technology investments
• Enable proactive management instead of reactive problem solving
• Support measurable outcomes and evidence-based service improvement
• Scale data integration as operational needs grow
• Deliver faster insights without building complex data pipelines

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at b.b@archangel.cloud. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

300065309969831

Contact

Brian Brown
07908633390
b.b@archangel.cloud

About your service

• Service categories:

  Application Development and Deployment

  Data management

  Data integration and intelligence

  • Data Ingestion and Transformation Software
• Multi cloud support: No

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Archangel Cloud can integrate with existing IoT platforms, building management systems, care platforms, enterprise applications, and analytics tools. It extends these systems by ingesting, normalising, and aggregating their data, while also operating independently as a standalone cloud service.
• Cloud deployment model: Public cloud
• Service constraints: Archangel Cloud is delivered as a managed public cloud service and requires an internet connection. The platform uses a serverless architecture, allowing routine maintenance and updates to be carried out without service downtime. Integration with third-party systems depends on the availability and quality of customer data sources and interfaces. Archangel Cloud uses a serverless, auto-scaling architecture to maintain consistent performance under varying workloads. Performance may still be influenced by data volumes, network connectivity, and responsiveness of integrated third-party systems.
• System requirements:
  • Internet access for secure web-based service access
  • Modern web browser supporting standard security protocols

User support

• Email or online ticketing support: Yes
• Support response times: Immediate response during business hours (Monday to Friday 09:00 - 17:30).; ; Outside business hours, users receive an automated response allowing creation of a P1 service ticket if they have an emergency requirement
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Support is provided with a 24 hour/365 day online support ticket system. The support team provides front line diagnostic services with second and third line technical support available based on the nature of the support request. ; ; Support issues are categorised as either Priority 1 (P1) or Priority 2 (P2); ; Technical support for category P1 issues is available 24 hours a day including Bank Holidays and weekends. Any fault or query which cannot be resolved by the front line team will be escalated internally for resolution.; ; P1 support cases are typically resolved within 2 hours and are defined as:; ; Fault Affecting Web portal (Critical features only e.g Ability to handle alarms, Softphone); ; Fault Affecting Essential Dial-up Service (e.g clock, tag, sos); ; Fault Affecting Partner devices (e.g Issues making calls to Tag/SOS); ; Fault Affecting Apps (Clock, Tag, SOS ONLY); ; Fault Affecting SMS services; ; All other support cases are defined as P2 and these are resolved within the next business day.; ; There is no additional charge for this support service.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We give customers access to an online learning portal which hosts video walkthroughs for all aspects of system operation. We also offer options for online webinar based training and on-site classroom type training if and when appropriate
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: 1. Data Extraction Method - Users can extract their data at any time during the contract term or exit period via the secure self-service portal. There is no requirement to contact support to initiate a standard data export.; ; 2. Data is exported in CSV format; ; 3. Scope of Data The export includes all customer-generated data and user profile information.; ; 4. Security All data exports are encrypted at rest and in transit using TLS 1.2+ (or higher). Exported files are provided via a secure download link accessible only to authorised administrators.; ; 5. Cost Standard self-service extraction is included in the service price free of charge. Bespoke extraction services (e.g., custom SQL database dumps or API-assisted migration) are available upon request and charged against quotation.
• End-of-contract process: 1. Data Extraction and Export Upon notice of termination, customers can extract their data at any time prior to the contract end date. We provide self-service tools allowing authorised administrators to export all operational data in CSV format; ; 2. Service Support during Offboarding We continue to provide full support and service availability up until the final day of the contract. Our support team is available to answer queries regarding data export to facilitate a smooth transition to a new supplier or in-house solution.; ; 3. End of Contract and Data Deletion Once the contract expires, the account will be set to 'read-only' for a grace period of 30 days to allow for any final data retrieval. Following this period, all customer data is securely deleted from our primary and backup systems in accordance with GDPR requirements and our data retention policy. A certificate of destruction can be provided upon request.; ; 4. Costs Standard offboarding (self-service data export) is included in the service price at no extra cost. Bespoke migration support is available if required and is charged against quotation.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Archangel Cloud uses a responsive web interface that adapts to mobile and tablet devices. Core functionality is available on both mobile and desktop. On smaller screens, layouts are optimised for readability and touch interaction, and some advanced configuration and administration tasks are more practical on desktop devices.
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Archangel Cloud provides a secure, browser-based web interface for monitoring, configuration, and data visualisation. Users access dashboards, operational views, and alerts through a responsive interface designed for desktop and mobile devices. The service also exposes APIs for integrating with external systems and analytics tools.
• Accessibility standards: None or don’t know
• Description of accessibility: Archangel Cloud is accessible through a browser-based web interface designed to work with standard accessibility features such as browser zoom, screen magnification, and keyboard navigation. The service also offers optional native iOS and Android applications for responders and end users, providing mobile access to alerts, notifications, and selected operational views. Core configuration and administration is typically performed via the web interface. Some complex data visualisations and advanced configuration screens may be easier to use with a mouse and larger screen. Working towards WCAG 2.2A.
• Accessibility testing: The service interface has not yet undergone formal usability testing with users of assistive technology. Accessibility considerations are included during design and development, and the web and mobile interfaces are tested using common browser and operating system accessibility features. Feedback from users is welcomed and used to inform ongoing improvements to accessibility.
• API: Yes
• What users can and can't do using the API: Archangel Cloud supports APIs for secure data ingestion, system integration, and management of service-related entities.; ; Current API functionality supports read write of:; - Sensor data; - End User Profile Information; - Reporting Data; - Alerts; ; It does not support administrator, roles or privileges.; ; API usage is enabled through guided onboarding, technical support and dedicated API keys. ; ; Core platform configuration and advanced administration are performed through the web interface and bulk uploads tools. ; ; API access is subject to authentication, authorisation, and data validation.; ; In addition Real-time events/data cancelled be ingested via MQTT and IOT core integration.
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Buyers can customise Archangel Cloud primarily through configuration. Authorised administrators can configure data sources, integrations, dashboards, alerts, thresholds, workflows, user roles, and permissions via the web interface. Branding elements, such as organisation logos, and bespoke configuration requests are managed by Archangel through an agreed change request process. API configuration supports integration with third-party systems. End users access configured views, while administrative users manage day-to-day configuration settings.

Scaling

• Independence of resources: The service is built on AWS managed and serverless services that automatically scale to meet demand. Auto-scaling, queue-based processing, and asynchronous workloads are used to handle spikes in usage without degrading overall performance. AWS provides resilient, shared infrastructure with built-in capacity management and fault isolation. This ensures that increased demand from one customer does not materially impact the performance or availability experienced by other users

Analytics

• Service usage metrics: Yes
• Metrics types: Archangel Cloud provides service usage and operational metrics through configurable dashboards and reports. Metrics include platform usage, data volumes, event activity, system health indicators, performance trends, and user activity, subject to access permissions. Metrics support monitoring, operational oversight, and reporting on service usage and outcomes.
• Reporting types:
  • API access
  • Real-time dashboards
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest:
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data importing and exporting

• Data export approach: Users can export data directly from the web interface using configurable reports and data tables. Reports can be exported in common formats such as CSV, Excel, and PDF, including operational, personal, and device-related data where permitted by access controls. Data can also be exported programmatically via secure APIs for integration with third-party systems, business intelligence tools, or data warehouses. API access is subject to authentication, authorisation, and data access permissions.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • PDF
  • JSON
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Archangel is designed for high availability (>99.98%), using resilient AWS-native services, with operational monitoring and incident response, but availability targets are typically described as best-efforts / service design, not penalty-backed guarantees.
• Approach to resilience: The service is designed for resilience using AWS managed infrastructure. Core components are deployed across multiple AWS Availability Zones to reduce the impact of individual component or datacentre failures. The platform uses managed AWS services that provide built-in redundancy, automated health monitoring, and self-healing capabilities.; The architecture supports horizontal scaling to handle changes in demand and to maintain performance during peak usage. Deployments are automated and can be rolled out with minimal service interruption. Data is stored in highly available managed databases with automated backups and point-in-time recovery.; Monitoring and alerting are in place to detect service degradation and trigger operational responses. Infrastructure is defined and managed using repeatable configurations to enable rapid recovery in the event of failure. Further details of the architecture and resilience controls are available on request.
• Outage reporting: Service availability is monitored continuously using automated monitoring and alerting. If an outage or service degradation is detected, operational teams are notified immediately and investigation and remediation begin.; Customers are informed of service-impacting incidents through service status updates and direct communication such as email and the support ticketing system. Incident updates are provided during an outage where appropriate, with follow-up information shared after resolution.; Customers can raise, track, and receive updates on incidents via the support ticketing system. Dependency-related incidents affecting underlying cloud services are monitored using provider status information and assessed for impact on the service. Outage and incident information can also be provided on request.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Access to management interfaces and support systems is restricted to authorised personnel only and granted on a least-privilege basis. Administrative access is role-based, logged, and protected using strong authentication controls. Access to cloud infrastructure is managed through AWS IAM with defined roles and permissions. Support channels, including the ticketing system and support email, are restricted to approved users and staff, with access reviewed periodically. All access to management and support systems is logged and monitored for audit and security purposes.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Our information security policies and processes are defined, implemented, and maintained in accordance with ISO/IEC 27001 and are managed through our certified information security management system (ISMS).; Policies cover areas including access control, data protection, encryption, incident management, vulnerability management, supplier management, and secure development practices. These policies apply to all staff involved in service delivery and are supported by regular security training and awareness activities.; Information security risks are identified, assessed, and managed through a formal risk management process. Risks are recorded, reviewed, and treated on an ongoing basis in line with defined risk acceptance criteria.; Compliance with security policies is monitored through internal reviews, change management processes, and scheduled internal and external audits. Security incidents and policy breaches are logged, investigated, and remediated in accordance with documented incident response procedures.; The service is hosted on Amazon Web Services (AWS). Infrastructure security controls operate under the shared responsibility model and are integrated into our overall security governance framework.; We hold current ISO/IEC 27001 certification and Cyber Essentials Plus certification, both of which are reviewed annually and apply to all systems used to deliver this service.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Configuration items are tracked using version control, AWS infrastructure-as-code and AWS service versioning (for example, versioned Lambda deployments). Changes are documented, reviewed and approved before release. Security and operational impact is assessed against the risk register and ISO/IEC 27001 controls. Deployments are automated with audit logging and rollback capability. Emergency changes follow a documented expedited approval process
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Vulnerabilities are identified through a combination of AWS security services, dependency monitoring, internal reviews and external security advisories. Potential threats are assessed based on risk, impact and likelihood, and recorded in the issue tracker and risk register. Remediation is prioritised according to severity. Patches and configuration changes are deployed via controlled release processes, with critical fixes expedited where required. AWS-managed services are kept up to date by the provider, with application-level components patched by the development team. Vulnerability status and remediation progress are reviewed regularly as part of operational security management.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Protective monitoring is implemented using AWS native logging and monitoring services, including CloudWatch metrics, logs and alarms, alongside application-level controls. API access is protected using managed authentication mechanisms, usage plans and request throttling to limit abuse and detect anomalous behaviour. Logs are retained and reviewed regularly to identify unauthorised access attempts, excessive request patterns or configuration changes. Automated alerts notify the team of potential security events. Where indicators of compromise are identified, access can be restricted, affected components isolated, and incidents investigated using audit logs.
• Incident management type: Supplier-defined controls
• Incident management approach: The service operates a defined incident management process aligned with ISO/IEC 27001. Common incident types have documented response procedures.; Users report incidents via a dedicated support email, which integrates with our ticketing and incident tracking system.; The platform is monitored 24/7, with critical incidents automatically alerting an on-call engineering team. Incidents are triaged and responded to in line with agreed SLAs.; Customers receive updates through the ticketing system, and incident reports are provided where required.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 10%
• Between £250,000 and £500,000: 10%
• Between £500,001 and £1,000,000: 10%
• Between £1,000,001 and £2,500,000: 10%
• Between £2,500,001 and £5,000,000: 10%
• Over £5,000,001: 10%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: C.O.M.S
• ISO/IEC 27001 accreditation date: Friday 26 September 2025
• What the ISO/IEC 27001 doesn’t cover: The certification does not cover customer-managed networks, devices or systems, or customer use of data outside the service. It also excludes experimental environments not used for live service delivery
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: SGS
• ISO 9001 accreditation date: Friday 16 August 2024
• What the ISO 9001 doesn’t cover: The certification does not cover customer-managed networks,devices or systems, or customer use of data outside the service. It also excludes experimental environments not used for live service delivery
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 7aaa53dd-a20f-4ec6-af22-4d70b3936c09
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 65ee08c7-5446-4a25-b515-65bbb41be68d
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at b.b@archangel.cloud. Tell them what format you need. It will help if you say what assistive technology you use.