INSIGHT DIRECT (UK) LTD

Enterprise Virtual Compute Optimisation (x86, General Purpose)

A premium, fully managed virtual compute service for enterprises needing scalable, reliable, and cost-effective x86 infrastructure, ideal for diverse workloads and digital transformation initiatives.

Features

• Enterprise-grade virtual x86 compute tailored for general-purpose workloads
• Seamless scalability to match fluctuating business demands and growth
• Advanced workload balancing for performance and resource optimisation
• High-availability architecture with automated failover capabilities
• Comprehensive monitoring and real-time analytics dashboards
• Integrated security controls including identity and access management
• Flexible deployment options across public, private, or hybrid cloud
• Self-service provisioning portal for rapid workload deployment
• Automated patching, updates, and lifecycle management
• 24/7 expert support with proactive incident resolution

Benefits

• Accelerate time-to-value for new applications and business services
• Reduce capital expenditure via consumption-based billing models
• Enhance agility by rapidly scaling compute resources as needs evolve
• Minimise downtime with resilient, highly available infrastructure
• Improve security posture with built-in compliance features
• Boost productivity through automation and self-service capabilities
• Enable seamless cloud and data centre integration for hybrid operations
• Optimise performance and cost with real-time usage analytics
• Streamline IT management, freeing staff for innovation
• Ensure business continuity with robust disaster recovery options

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at pstenderteam@insight.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

432149092569750

Contact

Public Sector Tender Team
0344 846 3333
pstenderteam@insight.com

About your service

• Service categories:

  IaaS

  IaaS Compute

  Virtualised x86

  • General purpose

Service scope

• Service constraints: Our managed service may have constraints related to planned maintenance windows, which are communicated in advance to clients. Support is limited to specific hardware configurations, primarily focusing on VMware, Microsoft, AWS, and Google platforms. Additionally, our service offerings do not include support for KVM-based environments. Security clearances for personnel are up to SC level only, and we adhere to Cyber Essentials Plus certification, which may impose certain operational conditions. Clients should also be aware that incident notifications occur within a 24-48 hour timeframe.
• System requirements:
  • Requires VMware, Microsoft, AWS, or Google for virtualisation.
  • Clients must implement multi-factor authentication for access.
  • AES-256 encryption required for data at rest and in transit.
  • Clients need to ensure WCAG 2.2 Level AA compliance.
  • Specific hardware configurations must be supported for service.
  • Regular updates and patches should be applied to systems.
  • Incident notification requires acknowledgment within 24-48 hours.
  • Clients need to define backup frequency and retention policies.
  • All support personnel must possess SC level clearance.
  • ServiceNow integration necessary for seamless ITSM operations.
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud

User support

• Email or online ticketing support: Yes
• Support response times: We respond to questions submitted via email or ticketing support within 1 business day during weekdays. Response times may be longer on weekends, typically extending to 48 hours.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: Yes
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: WCAG 2.2 AA
• Web chat accessibility testing: We have conducted extensive testing of our web chat support system with assistive technology users to ensure accessibility and usability. This testing involved collaboration with users who rely on screen readers and other assistive devices. We focused on the navigation, response time, and overall user experience within the web chat interface. Feedback from these users was instrumental in refining our service to meet WCAG 2.2 Level AA compliance. Additionally, we have implemented features such as keyboard navigability and clear, concise language to enhance the experience for all users, including those with disabilities. Regular updates to our web chat platform are based on ongoing user feedback, ensuring continuous improvement in accessibility.
• Onsite support: No
• Support levels: We provide three support levels: Standard, Enhanced, and Premium. Each level offers varying degrees of service and responsiveness. Standard support includes basic assistance during business hours, while Enhanced support extends to 24/7 availability with faster response times. Premium support offers the highest level of service, including dedicated technical account management and priority incident resolution.; ; Costs for these support levels vary based on the specific needs and agreements with the client. We also provide a dedicated Technical Account Manager for Premium support clients, while Cloud Support Engineers are available across all support levels to assist with technical inquiries and issues. Our support structure ensures that clients receive the right level of assistance tailored to their operational requirements.
• Support available to third parties: Yes
• AI chatbot: Yes

Onboarding and offboarding

• Getting started: To help users get started with our managed service, we provide a comprehensive onboarding process that includes both onsite and online training options tailored to meet client needs. Our onboarding begins with a Transition project that outlines the necessary steps for a smooth implementation. Training sessions are conducted to ensure users are familiar with the ServiceNow portal and its functionalities, which are WCAG 2.2 Level AA compliant. We also supply detailed user documentation that guides users through the service features and best practices. This documentation is accessible in various formats, allowing users to engage with it through different devices and assistive technologies. Additionally, our support team is available to address any queries during the onboarding phase, ensuring that users feel confident and supported as they begin using our service.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: At the end of the contract, users can extract their data through a structured process designed to ensure security and compliance. Insight will provide users with access to their data in agreed formats, facilitating an efficient extraction. This process includes a final data export conducted in accordance with data protection regulations to safeguard sensitive information. We will work closely with users to understand their specific data requirements and ensure that all necessary data is transferred securely and efficiently. Additionally, our team will offer support during this phase to assist with any queries or concerns, ensuring a smooth transition. Users will receive comprehensive documentation outlining the data extraction process as part of our commitment to transparency and support during offboarding.
• End-of-contract process: At the end of the contract, Insight follows a structured end-of-contract process to ensure a smooth transition. Included in the contract price are the final service reports and a debrief meeting to discuss service performance and feedback. Additionally, we will assist with the transfer of data and documentation to the designated party, ensuring compliance with data protection regulations.; ; Any additional costs may arise from specific requests beyond the standard process, such as extensive data migration services, bespoke training sessions for new systems, or prolonged support during the transition phase. Clients are informed of any potential additional costs well in advance, allowing for transparent planning. Our commitment is to ensure that the end-of-contract process is seamless, maintaining the integrity of service delivery throughout.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Using the web interface: Users can set up the service through the web interface by accessing the ServiceNow portal, where they can initiate service requests and configure various settings according to their needs. They can also create and manage service tickets, view performance reports, and monitor incident statuses. Changes to the service can be made directly through the portal, allowing users to adjust configurations, request modifications, and update their requirements seamlessly.; ; However, there are limitations to what users can set up or modify through the web interface. Certain critical configurations and advanced settings might require assistance from our support team to ensure compliance with security and operational standards. Additionally, some actions may be restricted based on the user's access level, ensuring that only authorised personnel can implement significant changes to the infrastructure or service parameters.
• Web interface accessibility standard: WCAG 2.2 AA
• Web interface accessibility testing: We have conducted extensive web interface testing with assistive technology users to ensure accessibility and usability. Our ServiceNow portal, which is WCAG 2.2 Level AA compliant, has been specifically tested with screen readers and other assistive technologies to confirm that all functionalities are accessible. Feedback from users with disabilities has been incorporated to enhance navigation and interaction. Additionally, we maintain ongoing testing and user feedback loops to continuously improve the interface for all users, including those requiring assistive technology. This commitment ensures an inclusive experience for all clients.
• API: Yes
• What users can and can't do using the API: Our ITSM platform is ServiceNow which has a fully documented API. ServiceNow provides robust REST API capabilities. You can use Scripted REST APIs to create custom integrations or manage users.
• API automation tools:
  • Ansible
  • Terraform
• API documentation: No
• Command line interface: No

Scaling

• Independence of resources: We guarantee user independence through a robust resource allocation strategy that ensures dedicated virtualized environments for each user. Our infrastructure employs advanced load balancing and auto-scaling mechanisms to adapt in real-time to varying demands. Additionally, we utilize performance monitoring tools to proactively identify and mitigate resource contention. This approach is complemented by our 24/7 monitoring and management services, which allow us to respond swiftly to any performance issues, ensuring that all users experience consistent service quality without impact from others' usage.
• Usage notifications: Yes
• Usage reporting: Email
• Optimising consumption: Yes
• Automatic scaling: Yes

Analytics

• Infrastructure or application metrics: Yes
• Metrics types:
  • CPU
  • Disk
  • HTTP request and response status
  • Memory
  • Network
  • Number of active instances
• Reporting types: Regular reports
• Resource tagging: Yes
• FOCUS resource tagging: Yes

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: AWS, Azure and Google

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest:
  • Encryption of all physical media
  • Other
• Other data at rest protection approach: We implement strong encryption protocols to protect data at rest, ensuring that sensitive information is secured both in storage and during transmission. Our data storage solutions utilise advanced encryption standards (AES) and comply with UK government security guidelines. Access to data is strictly controlled through role-based access controls and identity management systems, ensuring that only authorized personnel have access. Regular audits and compliance checks are conducted to maintain data integrity and confidentiality. Additionally, we employ data loss prevention measures to safeguard against unauthorized access and data breaches.
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Backup and recovery

• What’s backed up:
  • The nature of backups may include files, virtual machines, databases,
  • Application configurations, user settings, system states, cloud storage, email data
  • Log files, and configuration management data. The actual scope of
  • Backups is based on a shared responsibility model and
  • Client requirements.
• Backup controls: Insight controls the workloads that are protected by backups via change control to define with the client protected backup workloads.
• Datacentre setup: Multiple datacentres with disaster recovery
• Scheduling backups: Supplier controls the whole backup schedule
• Backup recovery: Users contact the support team
• Backup and recovery: Yes
• RPO/RTO: Yes

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
• Other protection between networks: We implement multiple layers of protection for data in transit between the buyer's network and our network. This includes the use of secure protocols such as TLS for encryption, ensuring that data is protected from interception. Additionally, we employ strict access controls and authentication mechanisms to prevent unauthorized access during data transmission. Our network architecture includes firewalls and intrusion detection systems to monitor and mitigate potential threats. Regular security assessments and compliance audits are conducted to maintain the highest standards of data protection, in line with UK government regulations.
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Other
• Other protection within supplier network: We employ a multi-layered security architecture to protect data within our network. This includes robust firewalls and intrusion detection systems to monitor traffic and identify potential threats. Our data is encrypted at rest using AES-256, and access is strictly controlled through multi-factor authentication (MFA) for all personnel. Regular security audits and third-party penetration testing enhance our security posture, ensuring compliance with Cyber Essentials Plus and ISO standards. Additionally, our 24/7 monitoring service enables proactive threat detection and incident response, thereby safeguarding sensitive information throughout its lifecycle.

Availability and resilience

• Guaranteed availability: Our managed services guarantee an availability of 99.9% for critical components. We proactively monitor our services 24/7, ensuring rapid incident response and minimal disruption. Our commitment to availability is backed by robust infrastructure, including redundant systems and regular maintenance protocols to prevent outages. We communicate any service interruptions within 24-48 hours, keeping clients informed and engaged.
• Approach to resilience: Our service is designed for resilience through a multi-layered approach. Our data centres are strategically located across multiple geographical regions, ensuring redundancy and failover capabilities. Each site is equipped with redundant power supplies, cooling systems, and network connections to maintain uptime during adverse conditions. We employ VMware and other leading virtualization technologies for efficient resource allocation and quick recovery. Our infrastructure has built-in failover mechanisms to automatically reroute traffic and services in the event of a failure. Security is paramount, with stringent access controls and continuous monitoring via our 24/7 Security Operations Centre (SOC). Specific details regarding our data centre setup can be made available upon request to ensure confidentiality.
• Outage reporting: Our service reports outages through multiple channels to ensure timely communication. We provide a public dashboard that displays real-time status and historical performance metrics, allowing users to check for any reported outages. Additionally, we offer an API for clients who wish to integrate outage information into their own systems. For immediate notifications, email alerts are sent to designated contacts within 24-48 hours of confirmed incidents. This multi-faceted approach ensures that our clients remain informed and can respond appropriately to any service interruptions.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Other
• Other user authentication: We authenticate users accessing the service through Multi-Factor Authentication (MFA), which requires users to present two or more verification factors. This approach enhances security by combining something the user knows (password) with something they have (authentication device or app). All user access is logged, and we ensure that only authenticated users can interact with the service, adhering to the highest security standards. Additionally, our ITSM system, ServiceNow, supports seamless integration and compliance with security protocols, ensuring a robust authentication process.
• Access restrictions in management interfaces and support channels: Access to management interfaces and support channels is restricted through Multi-Factor Authentication (MFA) for all personnel. Only security-cleared staff with validated access rights can use these channels. We employ role-based access controls (RBAC) to ensure that users have the minimum necessary permissions. All access attempts are logged and monitored, with auditing retained for 6-12 months to maintain compliance with security standards. Regular reviews of access permissions are conducted to mitigate any risks associated with unauthorized access. This comprehensive approach ensures secure management of our services.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Other
• Description of management access authentication: Management access to our service is authenticated through Multi-Factor Authentication (MFA). All personnel must provide multiple verification factors, combining something they know (a password) with something they possess (an authentication device or app). This ensures that only authorised users can gain access. Additionally, we monitor all access attempts and maintain logs for a minimum of 6-12 months, supporting compliance with security standards. Our approach is designed to safeguard sensitive information and uphold the integrity of our managed services while adhering to the highest security protocols.
• Devices users manage the service through: Any device but through a bastion host (a bastion host is a server that provides access to a private network from an external network such as the internet)

Audit information for users

• Access to user activity audit information: You control when users can access audit information
• How long user audit data is stored for: Between 6 months and 12 months
• Access to supplier activity audit information: You control when users can access audit information
• How long supplier audit data is stored for: Between 6 months and 12 months
• How long system logs are stored for: Between 6 months and 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: Insight UK has ISO 27001:2022, Cyber Essentials Plus, ISO 9001:2015 and ISO 14001:2015 certifications.
• Information security policies and processes: At Insight, we adhere to a comprehensive set of information security policies and processes aligned with ISO/IEC 27001 and Cyber Essentials Plus certifications. Our reporting structure includes a designated board-level security officer responsible for overseeing all security practices and ensuring compliance with our policies. We employ a systematic approach to manage information security risks, which involves regular risk assessments and audits.; ; Our policies encompass identity and access management, requiring multi-factor authentication (MFA) for all personnel access. We ensure data encryption at rest (AES-256) and in transit (TLS 1.2+) and maintain meticulous log retention of 6-12 months, which includes complete audit trails for accountability. ; ; Regular training and awareness programmes are conducted to ensure all staff are familiar with our security policies. Additionally, we implement proactive incident management, with notifications issued within 24-48 hours of confirmed incidents. These measures collectively ensure that our information security policies are consistently followed and effectively integrated into our managed services.

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Our configuration and change management processes track service components through an integrated system that logs each asset's lifecycle, from deployment to decommissioning. All changes are assessed for potential security impact using a risk assessment framework, ensuring compliance with our Cyber Essentials Plus and ISO standards. Changes are documented, reviewed, and approved through our ITSM system, ServiceNow, with notifications sent to relevant stakeholders. This structured approach allows us to maintain a secure and stable environment while quickly adapting to evolving client needs.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Our vulnerability management approach aligns with ISO27001. Time to resolution is determined on risk and criticality of the issue or vulnerability identified. ; Patches are tested prior to production implementation where applicable.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Our protective monitoring processes involve continuous surveillance of systems to identify potential compromises through anomaly detection and threat intelligence feeds. Upon detection, we initiate an incident response, ensuring notification within 24-48 hours. Our response includes containment, eradication, and recovery steps, guided by predefined incident management procedures. We leverage our 24/7 monitoring capabilities and XDR solutions to enhance our response effectiveness, ensuring that all incidents are managed promptly and in accordance with established security standards.
• Incident management type: Undisclosed
• Incident management approach: Our incident management process includes pre-defined procedures for common events, ensuring a swift response. Users report incidents via our ServiceNow portal, which is accessible 24/7 and complies with WCAG 2.2 Level AA standards. We provide incident reports detailing the nature of the incident, actions taken, and resolution timelines. Notifications for confirmed incidents are issued within 24-48 hours, ensuring transparency and effective communication throughout the incident lifecycle.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Separation between users

• Virtualisation technology used to keep applications and users sharing the same infrastructure apart: Yes
• Who implements virtualisation: Supplier
• Virtualisation technologies used: Other
• Other virtualisation technology used: Insight utilises VMware, Azure, and AWS Hypervisor virtualisation technology. Do not refer to KVM hypervisor technology.
• How shared infrastructure is kept separate: Different organisations sharing the same infrastructure are kept apart through logical separation via virtualisation technologies such as VMware and Microsoft, ensuring each entity operates within its own secure environment. Access controls, including multifactor authentication (MFA) and strict user permissions, further enhance security. Data is encrypted both at rest and in transit, while comprehensive logging and monitoring enable the detection of any unauthorized access attempts. Regular audits and compliance with standards like Cyber Essentials Plus and ISO certifications ensure ongoing adherence to security protocols, maintaining the integrity and confidentiality of each organisation's data.

Energy efficiency

• Energy-efficient datacentres: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: No

Discount

• Provide your minimum discount applicable to your baseline prices: 0%

Formula for calculating price of your services

• Formula for calculating price of your services:

  Which of the core deployment models you intend to offer

  • Public Cloud
  • Private Cloud

  Public Cloud - Formula for calculating price of your services

  ---

  Total Cost

  The Total Cost for a buyer's call off requirement in a Public Cloud Deployment

  =

  Baseline Pricing

  G-Cloud Digital Marketplace

  Baseline Pricing - Web link

  https://www.gov.uk/digital-marketplace

  -

  Minimum Discounting

  0%

  +

  Onboarding Activity

  Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process

  +

  Additional sources of cost

  Unmanaged cloud activity can increase costs and risk for public sector buyers. Key drivers include data movement (inter‑region/zone egress, CDN origin fetches, Azure ExpressRoute metered egress, AWS NAT Gateway, Google Cloud Interconnect/NAT), storage and backup (snapshot sprawl, cold‑tier retrieval, Azure Archive rehydration, AWS Glacier tier fees, Google Coldline early deletion), compute/database inefficiencies (oversized instances, unattached disks/IPs, mis‑tuned autoscaling, misaligned reserved commitments), observability/serverless overhead (log ingestion/retention in Azure Log Analytics, AWS CloudWatch, Google Cloud Logging; serverless retries and event fan‑out), licensing/marketplace charges, and governance gaps (untagged resources, idle dev/test).; Insight mitigates these risks with egress‑aware architecture reviews, commitment management, tagging and lifecycle policies, budget alerts, and chargeback frameworks aligned to ISO 27001, Cyber Essentials and NCSC guidance. Changes are validated against performance, security and compliance requirements prior to implementation to avoid service disruption. Typical engagements reduce unmanaged cost growth by 20–30%, improving accountability through transparent reporting and showback/chargeback. Continuous optimisation ensures commitments track actual usage and observability and storage footprints remain controlled, helping buyers maintain predictable budgets, meet governance obligations and reinvest savings into priority services.

  -

  Additional sources of cost reduction

  Insight enables UK public sector organisations to achieve predictable, sustainable cloud cost reductions across Microsoft Azure, AWS and Google Cloud. As an Azure Expert MSP, AWS Premier Consulting Partner and Google Cloud Premier Partner, we apply proven methodologies aligned with recognised standards such as ISO 27001, Cyber Essentials and NCSC guidance.; Sources of cost reduction include:; ; Reserved Instance and Savings Plan optimisation to maximise discounts.; Rightsizing and workload alignment to eliminate overprovisioning.; Automated assessments and governance frameworks to detect inefficiencies early and enforce compliance.; Proprietary dashboards for real-time spend visibility and scheduled reviews for continuous optimisation.; ; Our approach combines automation with expert-led reviews, ensuring savings without service disruption or security compromise. Typical engagements deliver 20–30% cost reductions across multi-cloud environments. For example, Insight helped a UK government agency cut Azure costs by 28%, reinvesting savings into public-facing digital services.; Risk mitigation is central to our process: optimisation changes are validated against performance and compliance requirements before implementation. Buyers benefit from transparent reporting, predictable budgets and reinvestment opportunities, all delivered through a structured, repeatable methodology tailored to public sector needs.

  ---

  Private Cloud - Formula for calculating price of your services

  ---

  Total Cost

  The Total Cost for a buyer's call off requirement in a Private Cloud Deployment

  =

  Baseline Pricing

  G-Cloud Digital Marketplace

  -

  Minimum Discounting

  0%

  +

  Onboarding Activity

  Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process

  +

  Additional sources of cost

  Unmanaged cloud activity can increase costs and risk for public sector buyers. Key drivers include data movement (inter‑region/zone egress, CDN origin fetches, Azure ExpressRoute metered egress, AWS NAT Gateway, Google Cloud Interconnect/NAT), storage and backup (snapshot sprawl, cold‑tier retrieval, Azure Archive rehydration, AWS Glacier tier fees, Google Coldline early deletion), compute/database inefficiencies (oversized instances, unattached disks/IPs, mis‑tuned autoscaling, misaligned reserved commitments), observability/serverless overhead (log ingestion/retention in Azure Log Analytics, AWS CloudWatch, Google Cloud Logging; serverless retries and event fan‑out), licensing/marketplace charges, and governance gaps (untagged resources, idle dev/test).; Insight mitigates these risks with egress‑aware architecture reviews, commitment management, tagging and lifecycle policies, budget alerts, and chargeback frameworks aligned to ISO 27001, Cyber Essentials and NCSC guidance. Changes are validated against performance, security and compliance requirements prior to implementation to avoid service disruption. Typical engagements reduce unmanaged cost growth by 20–30%, improving accountability through transparent reporting and showback/chargeback. Continuous optimisation ensures commitments track actual usage and observability and storage footprints remain controlled, helping buyers maintain predictable budgets, meet governance obligations and reinvest savings into priority services.

  -

  Additional sources of cost reduction

  Insight enables UK public sector organisations to achieve predictable, sustainable cloud cost reductions across Microsoft Azure, AWS and Google Cloud. As an Azure Expert MSP, AWS Premier Consulting Partner and Google Cloud Premier Partner, we apply proven methodologies aligned with recognised standards such as ISO 27001, Cyber Essentials and NCSC guidance.; Sources of cost reduction include:; ; Reserved Instance and Savings Plan optimisation to maximise discounts.; Rightsizing and workload alignment to eliminate overprovisioning.; Automated assessments and governance frameworks to detect inefficiencies early and enforce compliance.; Proprietary dashboards for real-time spend visibility and scheduled reviews for continuous optimisation.; ; Our approach combines automation with expert-led reviews, ensuring savings without service disruption or security compromise. Typical engagements deliver 20–30% cost reductions across multi-cloud environments. For example, Insight helped a UK government agency cut Azure costs by 28%, reinvesting savings into public-facing digital services.; Risk mitigation is central to our process: optimisation changes are validated against performance and compliance requirements before implementation. Buyers benefit from transparent reporting, predictable budgets and reinvestment opportunities, all delivered through a structured, repeatable methodology tailored to public sector needs.

  ---

• Total Cost: The Total Cost for a buyer's call off requirement in a Public Cloud Deployment
• Baseline Pricing: G-Cloud Digital Marketplace
• Baseline Pricing - Web link: https://www.gov.uk/digital-marketplace
• Minimum Discounting: 0%
• Onboarding Activity: Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process
• Additional sources of cost: Unmanaged cloud activity can increase costs and risk for public sector buyers. Key drivers include data movement (inter‑region/zone egress, CDN origin fetches, Azure ExpressRoute metered egress, AWS NAT Gateway, Google Cloud Interconnect/NAT), storage and backup (snapshot sprawl, cold‑tier retrieval, Azure Archive rehydration, AWS Glacier tier fees, Google Coldline early deletion), compute/database inefficiencies (oversized instances, unattached disks/IPs, mis‑tuned autoscaling, misaligned reserved commitments), observability/serverless overhead (log ingestion/retention in Azure Log Analytics, AWS CloudWatch, Google Cloud Logging; serverless retries and event fan‑out), licensing/marketplace charges, and governance gaps (untagged resources, idle dev/test).; Insight mitigates these risks with egress‑aware architecture reviews, commitment management, tagging and lifecycle policies, budget alerts, and chargeback frameworks aligned to ISO 27001, Cyber Essentials and NCSC guidance. Changes are validated against performance, security and compliance requirements prior to implementation to avoid service disruption. Typical engagements reduce unmanaged cost growth by 20–30%, improving accountability through transparent reporting and showback/chargeback. Continuous optimisation ensures commitments track actual usage and observability and storage footprints remain controlled, helping buyers maintain predictable budgets, meet governance obligations and reinvest savings into priority services.
• Additional sources of cost reduction: Insight enables UK public sector organisations to achieve predictable, sustainable cloud cost reductions across Microsoft Azure, AWS and Google Cloud. As an Azure Expert MSP, AWS Premier Consulting Partner and Google Cloud Premier Partner, we apply proven methodologies aligned with recognised standards such as ISO 27001, Cyber Essentials and NCSC guidance.; Sources of cost reduction include:; ; Reserved Instance and Savings Plan optimisation to maximise discounts.; Rightsizing and workload alignment to eliminate overprovisioning.; Automated assessments and governance frameworks to detect inefficiencies early and enforce compliance.; Proprietary dashboards for real-time spend visibility and scheduled reviews for continuous optimisation.; ; Our approach combines automation with expert-led reviews, ensuring savings without service disruption or security compromise. Typical engagements deliver 20–30% cost reductions across multi-cloud environments. For example, Insight helped a UK government agency cut Azure costs by 28%, reinvesting savings into public-facing digital services.; Risk mitigation is central to our process: optimisation changes are validated against performance and compliance requirements before implementation. Buyers benefit from transparent reporting, predictable budgets and reinvestment opportunities, all delivered through a structured, repeatable methodology tailored to public sector needs.
• Total Cost: The Total Cost for a buyer's call off requirement in a Private Cloud Deployment
• Baseline Pricing: G-Cloud Digital Marketplace
• Minimum Discounting: 0%
• Onboarding Activity: Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process
• Additional sources of cost: Unmanaged cloud activity can increase costs and risk for public sector buyers. Key drivers include data movement (inter‑region/zone egress, CDN origin fetches, Azure ExpressRoute metered egress, AWS NAT Gateway, Google Cloud Interconnect/NAT), storage and backup (snapshot sprawl, cold‑tier retrieval, Azure Archive rehydration, AWS Glacier tier fees, Google Coldline early deletion), compute/database inefficiencies (oversized instances, unattached disks/IPs, mis‑tuned autoscaling, misaligned reserved commitments), observability/serverless overhead (log ingestion/retention in Azure Log Analytics, AWS CloudWatch, Google Cloud Logging; serverless retries and event fan‑out), licensing/marketplace charges, and governance gaps (untagged resources, idle dev/test).; Insight mitigates these risks with egress‑aware architecture reviews, commitment management, tagging and lifecycle policies, budget alerts, and chargeback frameworks aligned to ISO 27001, Cyber Essentials and NCSC guidance. Changes are validated against performance, security and compliance requirements prior to implementation to avoid service disruption. Typical engagements reduce unmanaged cost growth by 20–30%, improving accountability through transparent reporting and showback/chargeback. Continuous optimisation ensures commitments track actual usage and observability and storage footprints remain controlled, helping buyers maintain predictable budgets, meet governance obligations and reinvest savings into priority services.
• Additional sources of cost reduction: Insight enables UK public sector organisations to achieve predictable, sustainable cloud cost reductions across Microsoft Azure, AWS and Google Cloud. As an Azure Expert MSP, AWS Premier Consulting Partner and Google Cloud Premier Partner, we apply proven methodologies aligned with recognised standards such as ISO 27001, Cyber Essentials and NCSC guidance.; Sources of cost reduction include:; ; Reserved Instance and Savings Plan optimisation to maximise discounts.; Rightsizing and workload alignment to eliminate overprovisioning.; Automated assessments and governance frameworks to detect inefficiencies early and enforce compliance.; Proprietary dashboards for real-time spend visibility and scheduled reviews for continuous optimisation.; ; Our approach combines automation with expert-led reviews, ensuring savings without service disruption or security compromise. Typical engagements deliver 20–30% cost reductions across multi-cloud environments. For example, Insight helped a UK government agency cut Azure costs by 28%, reinvesting savings into public-facing digital services.; Risk mitigation is central to our process: optimisation changes are validated against performance and compliance requirements before implementation. Buyers benefit from transparent reporting, predictable budgets and reinvestment opportunities, all delivered through a structured, repeatable methodology tailored to public sector needs.

Mandatory certifications

• Mandatory certifications:

  Are you are bidding to offer IaaS and/or PaaS as a reseller or are you in sole control of the infrastructure

  Reseller

  Cloud service suppliers you intend to resell with evidence

  Organisation 1

  Organisation name

  AWS

  Website address/upload for organisation

  Website address

  Website address

  https://partners.amazonaws.com/partners/001E000000UfalBIAR/Insight%20Enterprises

  Organisation 2

  Organisation name

  Microsoft

  Website address/upload for organisation

  Website address

  Website address

  https://marketplace.microsoft.com/en-us/partners/8bc78177-662b-440b-ae00-bbc5bf193536/overview

  Organisation 3

  Organisation name

  Google

  Website address/upload for organisation

  Website address

  Website address

  https://cloud.google.com/find-a-partner/partner/insight-direct-uk-ltd

  Organisation 4

  Organisation name

  Salesforce

  Website address/upload for organisation

  Upload

  Upload

  Provided

  ISO 9001 certification

  Provided

  ISO 27001 certification

  Provided

  ISO 20000-1 certification

  Provided

  Are you reliant on the Cloud Service Provider for some accreditations

  Yes

Cyber Essentials

• Do you have a Cyber Essentials Plus certificate?: Yes
• Cyber Essentials Plus certificate Number: Cd8b1a78-44c7-4bb0-84d6-59a7506f3bba

Non-mandatory Standards and certifications

• ISO 28000:2022 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Ensuring new workers are informed of their right to join a trade union
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at pstenderteam@insight.com. Tell them what format you need. It will help if you say what assistive technology you use.