Mitra Innovation

WSO2

As a WSO2 Platinum Partner, Mitra has spent well over a decade helping clients deliver integration, API management and IAM projects. We specialize in Open Banking (OB), Insurance, Financial Services, Healthcare and Telecommunications, and have applied WSO2 technology to the business problems and opportunities of our clients in 20+ countries.

Features

• 100s of pre-built connectors, integrations, configuration templates
• Built on OSS technology, Kubernetes/Docker
• Enterprise Integration, Identity and Access Management, API Management
• 99.99% Uptime across all Mitra-managed WSO2 projects
• 0 SLA breaches to our existing WSO2 customers since 2020
• 24x7 year-round Support Service for WSO2 technology in your projects
• Tailor-made WSO2 consulting services for any stage of project
• Expertise Beyond WSO2 in all areas of DevOps/PM/QA

Benefits

• No vendor lock-in, standards based
• Extremely adaptable and extensible configurations
• Over a Decade of WSO2 Experience
• Skill and experience in building and supporting WSO2 platforms
• Supporting customer success moving beyond just a WSO2 service provider
• Minimizing risk during transition while ensuring seamless and continuous BAU
• Customers from 20+ countries covering various public sector scenarios

£200 to £1,700 a unit

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at accountcreation@mitrai.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

300592297732421

Contact

Ashok Suppiah
07917508319
accountcreation@mitrai.com

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud
• Service constraints: N/A
• System requirements: N/A

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Critical(Business impact of the Fault is immediate and major, use of the service is not possible and no workaround exists) -SLA is 15 mins. High(Business impact of the fault is immediate and major, but a business or technical workaround has been put in place. Production use of the service is possible with some functionality disabled or performing in a degraded state) - SLA 25 mins Medium(Business impact of the Fault is low. The services are not severely impacted because an acceptable workaround exists)- SLA 45 mins. Low - Fault is causing some inconvenience to the End Use SLA 55
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: No
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Level 2 - Application Support Provides technical support for Production Systems / Applications / Websites Triage with the Development team and other stakeholders to identify the root cause of issues in the system and to resolve them Deploy code/solution in Production systems while adhering to Change Management Processes Monitor the system and highlight if any potential risks or issues identified Level 3 - Development & QA Level 3 Development team that deals with more in-depth technical problems. Typically performing defect fixes, research and developing new solutions for client needs. QA team that deals with maintaining quality deliverables Manual Testing, Automation & Defect management All support projects will have a technical account manager and will conduct monthly service reviews with buyer. Support will cost based on the location the support is required (UK or offshore) and monthly capacity buckets ( 40 hours a month or 80 hours a month or 160 hours a month)
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: User documentation. Online training can be provided. Direct access to WSO2's own employees where needed, through online or onsite training.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Can be extracted subject to WSO2's terms and conditions.
• End-of-contract process: Annual (or multi-year) contracts need to be renewed before reaching the due date to avoid suspension of the services subscribed.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Firefox
  • Chrome
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Accessible through a mobile device, however, recommended experience is through a desktop.
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Self-service web portal.
• Accessibility standards: None or don’t know
• Description of accessibility: Creating integrations, services and APIs; managing APIs; deploying services and APIs; and deploying/making security configurations.
• Accessibility testing: N/A
• API: Yes
• What users can and can't do using the API: Full product administration, auditing, and also developing some of the logic contained within the product or deploying such pre-developed configurations.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Customisation is product-specific and only available in scenarios where the user is deploying the WSO2 products rather than using hosted services.

Scaling

• Independence of resources: Systems use autoscaling features provided by the infrastructure provider in where the solutions are hosted

Analytics

• Service usage metrics: Yes
• Metrics types: Full operational metrics and audit
• Reporting types:
  • API access
  • Real-time dashboards
  • Reports on request

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: WSO2 UK Limited

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Other
• Other data at rest protection approach: Supplier-defined controls
• Data sanitisation process: No
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Variable based on product and explained in the product-specific documentation.
• Data export formats: Other
• Data import formats: Other

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Covered under WSO2 and Mitra SLA guarantees explained in our service documentation below.
• Approach to resilience: Available on request
• Outage reporting: Email alerts and dashboards

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Role/site-based access restrictions.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: No audit information available
• Access to supplier activity audit information: No audit information available
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: BSI Group
• ISO/IEC 27001 accreditation date: 18/04/2022
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: All WSO2 products confirm to ISO27001 standards. Detailed documents can be provided upon request.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: All WSO2 products confirm to ISO27001 standards. Detailed documents can be provided upon request.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: All WSO2 products confirm to ISO27001 standards. Detailed documents can be provided upon request.
• Protective monitoring type: Undisclosed
• Protective monitoring approach: All WSO2 products confirm to ISO27001 standards. Detailed documents can be provided upon request.
• Incident management type: Supplier-defined controls
• Incident management approach: Incident management process as per WSO2 support service terms and conditions.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Tackling economic inequality
  • Equal opportunity

  Fighting climate change

  Mitra drives many initiatives that help our environment (ie. employee pledges to not use plastics within work place, Converting facilities to operate on soloar energy, etc.) We are tracking our ESG goals through tools and have a goal to become net zero by 2025.

  Tackling economic inequality

  Mitra believes in equal opportunity for all our employees and in gender equality. with over 30% of our staff being female including the CEO. We are a member of Diversity Collective Lanka, an organisation dedicated towards creating gender diversity and equality.

  Equal opportunity

  Mitra encourages a work-life balance for our employees and carries out multiple initiatives to help our employees. We allow a hybrid approach to work location, weekly entertainment events, annual parties, gym facilities within the office, and medical and life insurance for all employees, among other well being initiatives.

Pricing

• Price: £200 to £1,700 a unit
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Free-trial availability is subject to approval by WSO2.

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at accountcreation@mitrai.com. Tell them what format you need. It will help if you say what assistive technology you use.