Flat Rock Technology

Backup, Archive & Disaster Recovery

Flat Rock Technology 'Backup, Archive and Disaster Recovery' service provides data and applications' protection regardless of location, to avoid costly business interruptions or meet compliance requirements. It securely extends on-premises' backup storage and data archiving solutions to the cloud - reducing cost and complexity, while achieving efficiency and scalability.

Features

• Archive on-premises data to cloud.
• Back up cloud applications and data to cloud.
• Back up on-premises applications and data to cloud.
• Disaster recovery solution for on-premises machines, and for Azure VMs.
• Backup for individual Azure VMs.

Benefits

• Increase capacity, reduce costs.
• Get hassle-free backup and data archiving.
• Assure that client's compliance goals are met.
• Keep client's remote and branch offices running smoothly.
• Jumpstart backup and archive in the client's organization.

£30 an instance a month

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ran@flatrocktech.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

438811716105927

Contact

Ran Berger
07980854961
ran@flatrocktech.com

Service scope

• Service constraints: Flat Rock Technology need to do initial evaluation of the existing applications, data and infrastructure before proposing the full solution.
• System requirements:
  • Contract with Flat Rock Technology for the specified services.
  • Flat Rock Technology is indicated as Digital Partner of Record.

User support

• Email or online ticketing support: Yes, at extra cost
• Support response times: Depends on the severity but in the worst case up to 8 hours.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: SLA for Azure Backup (https://www.microsoft.com/licensing/docs/view/Service-Level-Agreements-SLA-for-Online-Services?lang=1 ). Support levels (can be client specific and negotiable) and cost are described in the pricing document. Flat Rock Technology provide technical account manager / cloud support engineers.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Flat Rock Technology provide onsite training, online training and user documentation.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Clients request it and Flat Rock Technology extract the relevant data.
• End-of-contract process: In general, given no time restriction to the agreement, the end of the contract is marked by a successful completion, i.e. all goals and objectives defined in the contract have been delivered. This leads to client's acceptance of the deliverables and finalisation of all payments.; ; At the end of the contract, and once the client have paid all outstanding amounts, Flat Rock Technology handover all documentation, code and any other IP to the client.; ; In the price of the contract is included the pricing for the corresponding project scope according to the team estimation. ; ; Every new, additional work comes at an additional cost after proper task definition and estimation.

Using the service

• Web browser interface: Yes
• Using the web interface: It is a combination of web and desktop interface.
• Web interface accessibility standard: None or don’t know
• How the web interface is accessible: Users cannot request additional features.
• Web interface accessibility testing: It is up to the public cloud providers used.
• API: Yes
• What users can and can't do using the API: Users can fully manage and setup the service through the API.
• API automation tools: Terraform
• API documentation: Yes
• API documentation formats: HTML
• Command line interface: Yes
• Command line interface compatibility:
  • Linux or Unix
  • Windows
  • MacOS
• Using the command line interface: The Azure CLI is a command-line tool providing a great experience for managing Azure resources. The CLI is designed to make scripting easy, query data, support long-running operations, and more.

Scaling

• Scaling available: Yes
• Scaling type: Manual
• Independence of resources: Flat Rock Technology utilise products from the top public cloud providers, so that handling users' demand is guaranteed.
• Usage notifications: Yes
• Usage reporting: Email

Analytics

• Infrastructure or application metrics: Yes
• Metrics types:
  • Disk
  • Memory
  • Network
  • Number of active instances
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Microsoft, Amazon

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest: Physical access control, complying with another standard
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: In-house destruction process

Backup and recovery

• Backup and recovery: No

Data-in-transit protection

• Data protection between buyer and supplier networks: Other
• Other protection between networks: On-premises, data-in-transit is encrypted on the on-premises' machine using AES256. The data transmitted is protected by HTTPS between storage and backup. The iSCSI protocol secures the data transmitted between backup and the user machine. Secure tunneling is used to protect the iSCSI channel.
• Data protection within supplier network: Other
• Other protection within supplier network: For on-premises to Azure backup, data in Azure is encrypted at-rest using the passphrase clients provide when they set up backup. The passphrase or key is never transmitted or stored in Azure. If it is necessary to restore any of the data, only the clients have encryption passphrase, or key.; For Azure VMs, data is encrypted at-reset using Storage Service Encryption (SSE). Backup automatically encrypts data before storing it. Azure Storage decrypts data before retrieving it.; Backup also supports Azure VMs encrypted using Azure Disk Encryption (ADE).

Availability and resilience

• Guaranteed availability: Microsoft Azure guarantees at least 99.9% availability of the backup and restore functionality of the Azure Backup service. SLA for Azure Backup - https://www.microsoft.com/licensing/docs/view/Service-Level-Agreements-SLA-for-Online-Services?lang=1 . Failure to meet the guaranteed availability levels is compensated by service credits towards a portion of users' monthly service fees. 10% credit is refundable if the monthly uptime percentage falls below 99.9%; and 25% - if less than 90%.
• Approach to resilience: Available on request.
• Outage reporting: Email alerts.

Identity and authentication

• User authentication:
  • 2-factor authentication
  • Username or password
  • Other
• Other user authentication: Multifactor Authentication Process
• Access restrictions in management interfaces and support channels: Flat Rock Technology use Azure Active Directory in combination with Azure Role Based Access Control.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Username or password
  • Other
• Description of management access authentication: Multifactor Authentication Process
• Devices users manage the service through: Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: Less than 1 month
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: Less than 1 month
• How long system logs are stored for: Between 1 month and 6 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Bureau Veritas
• ISO/IEC 27001 accreditation date: 06/2018
• What the ISO/IEC 27001 doesn’t cover: The whole ISO 27001 scope is covered with no exceptions.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: No
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: Cyber Essentials
• Information security policies and processes: Flat Rock Technology have an Integrated Management System which combines the requirements of ISO 9001 and ISO 27001. Security policies are defined and available and each employee gets familiar with them when starting their job. Following them is regularly checked as well as the possibilities for improving them. Flat Rock Technology use a combination of automated and manual reporting.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We manage access to resources and their settings with Azure Role Based access control (RBAC). Assign Azure roles using the Azure portal - Azure RBAC(https://learn.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal ) With Azure Active Directory (Azure AD, now known as Microsoft Entra ID) reports, you can get the information you need to determine how your environment is doing. Audit logs - Provides traceability through logs for all changes done by various features within Azure AD. Examples of audit logs include changes made to any resources within Azure AD like adding or removing users, apps, groups, roles and policies.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: With regards to backup and archiving services Flat Rock Technology rely on the vulnerability management process of the cloud providers they use: Microsoft Azure, Amazon AWS.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: With regards to backup and archiving services Flat Rock Technology rely on the cloud providers they use: Microsoft Azure, Amazon AWS.
• Incident management type: Supplier-defined controls
• Incident management approach: Flat Rock Technology are ISO 27001 and ISO 20000 certified. They have defined incident management process described in a respective procedure. The company also have systems where users can report incidents.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Separation between users

• Virtualisation technology used to keep applications and users sharing the same infrastructure apart: Yes
• Who implements virtualisation: Supplier
• Virtualisation technologies used: Hyper-V
• How shared infrastructure is kept separate: Azure runs on a customized version of Hyper-V. It’s fairly close to Hyper-V core in construct or theory, but that’s where all the similarities end. It’s super hardened and stripped down to ensure only signed and authorized components run on top of it.

Energy efficiency

• Energy-efficient datacentres: Yes
• Description of energy efficient datacentres: Flat Rock Technology use Microsoft Azure and Amazon AWS.

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery

  Fighting climate change

  Our cloud services at Flat Rock Technology are optimized for energy efficiency, reducing the carbon footprint associated with traditional on-premises data centers. By utilizing our services, public sector organizations can significantly lower their energy consumption and CO2 output, contributing to the global effort to combat climate change. Flat Rock Technology leads the charge in combating climate change, achieving carbon-neutral certification for three consecutive years. Through proactive measures and emissions offsetting since 2020, we've minimized our carbon footprint. Recognized by Carbon Neutral Ltd., our commitment underscores our dedication to a sustainable future.

  Covid-19 recovery

  Our cloud services play a crucial role in supporting organizations' response to the pandemic and facilitating recovery efforts. We create employment and re-training opportunities, particularly in high-growth sectors, helping individuals and communities affected by COVID-19 to transition back to work. Additionally, our services support the physical and mental health of those affected by the pandemic by enabling remote work and effective social distancing measures.

Pricing

• Price: £30 an instance a month
• Discount for educational organisations: Yes
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ran@flatrocktech.com. Tell them what format you need. It will help if you say what assistive technology you use.