Exponential-e Ltd

Hybrid Cloud Infrastructure as a Service (IaaS)

Exponential-e provide Hybrid Cloud IaaS Platform Services to underpin your critical applications through a combination of dedicated cloud and public cloud architecture, fully integrated through high performance private networking. Management demarcation includes IaaS or PaaS.

Features

• Enterprise level hardware and virtualisation software
• Geographically diverse locations (UK based) in Tier III datacentres
• Automation with self-service portal
• Microsoft Server Operating System licenses included
• 24x7x365 service support
• Fully Redundant architecture
• Monitoring and Management of servers available
• Hybrid Cloud - shared and private platforms available
• Flexible connectivity options - SDN, VPLS, Internet
• All Flash Storage for all virtual machines

Benefits

• Offloading infrastructure management burden
• Increased resilience over traditional server technology
• Improved IT Agility - significantly reduce time to implement
• Flexible commercial models to meet budget requirements
• Reduce Total Cost of Ownership by flexing infrastructure spending
• Maximised server availability over multiple UK cloud nodes
• Improved Business Continuity and Disaster Recovery
• Faster response times to external factors impacting your business performance
• Enables internal IT personnel to focus on application and users

£0.10 a gigabyte a month

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at psbids@exponential-e.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

439997706468582

Contact

Kay Sugg
02034358835
psbids@exponential-e.com

Service scope

• Service constraints: Planned and Emergency Works:; Exponential-e will adhere to the following maintenance windows: ‘Planned Maintenance’ means pre-planned maintenance of the infrastructure relating to the service. Planned Maintenance activity may result in periods of degradation or loss of availability. In such cases, Exponential-e will aim to provide at least 14 days’ notice via email of any planned works and shall aim to perform them between 00:00 and 06:00 GMT/BST.; ‘Emergency Maintenance’ Exponential-e reserves the right to carry out emergency works at any time, without notice. Every effort shall be made to contact customers before the commencement of emergency maintenance.
• System requirements:
  • Management of virtual machines as an additional service
  • Anti-virus can be provided as an additional service
  • Exponential-e provided VM templates or bespoke customer templates
  • Customers can bring licenses with software assurance
  • Backup of VMs can be provided as an additional service
  • Security Operations can be provided as an additional service

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: P1 Target Response Time - 15 mins; P2 Target Response Time - 15 mins; P3 Target Response Time - 30 mins; P4 Target Response Time - 30 mins
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Each Infrastructure as a Service site - 99.9% Dual Site solution with replication - 99.95% target Our customers are at the heart of everything that we do; from the solutions that we sell to offering a 24x7x365 UK based Service Desk as standard, we offer our customers only the very best. Flexible and modular managed services can be layered on top of our infrastructure services, covering backup and patching through to full managed server applications. Infrastructure and network monitoring 24x7x365 through our Insight Portal. Exponential-e employees aim to exceed expectations with innovation and service. They are open and transparent in their approach to ensure that our customers are kept updated at every step of the process.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Exponential-e is able to offer managed on-boarding through a variety of technologies and techniques: • Import from Open Virtualization Format (OVF) files • Import from common hypervisor files (VMDK etc.) • Online replication tools to take an image of the source virtual machine and incrementally update it until cut-over • Application level replication (i.e. SQL mirroring, log shipping, backups etc.) • Customised Exponential-e WAN circuits (layer 2 or layer 3 as appropriate) to facilitate the above options • Internet or physical transfer of images • Synchronisation VIA Server replication The on-boarding process will be managed by Exponential-e’s dedicated Cloud Project Management team using PRINCE2 project management methodology.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: The customer may extract their application based data at any point during the contract term by self-service. At the end of the term and/or if the contract is terminated, the Service Migration provisions will apply. If customised data transportation, data extraction or full virtual machine export services are required these will be charged at the prevailing time and materials day rate listed in the pricing section below. In order to action these customised services, an off-boarding service request must be raised via the Exponential-e Service Desk and due to the fact those services have not been not included within Exponential-e’s G-Cloud catalogue entry and thus do not fall within the Framework Agreement and Call Off Agreement, Exponential-e’s standard terms and conditions for professional services would apply.
• End-of-contract process: At the end of contract, customers will be able to export their data. At the point of termination, all customer data, accounts and access will be permanently deleted, and will not be able to be subsequently recovered or restored.

Using the service

• Web browser interface: Yes
• Using the web interface: The Exponential-e shared IaaS is built on VMware vCloud Director (vCD), which includes a RESTful API interface to enable programmatic access and management of virtual assets. The extensive API list can be used to undertake many common activities, such creating/power up/power down machines and clone machines.
• Web interface accessibility standard: WCAG 2.1 AAA
• Web interface accessibility testing: Details available on request.
• API: Yes
• What users can and can't do using the API: The Exponential-e shared IaaS is built on VMware vCloud Director (vCD), which includes a RESTful API interface to enable programmatic access and management of virtual assets. The extensive API list can be used to undertake many common activities, such creating/power up/power down machines and clone machines.
• API automation tools:
  • Chef
  • Puppet
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• Command line interface: No

Scaling

• Scaling available: Yes
• Scaling type: Automatic
• Independence of resources: Our platform is fully capacity managed with pre-defined thresholds to initiate additional scaling at compute and storage layers, whilst complying with virtualisation best practises such as not contending RAM. We also offer dedicated clouds and reservation clusters to ensure requirements are fine tuned to customers requirements for isolation and performance guarantees.
• Usage notifications: No

Analytics

• Infrastructure or application metrics: Yes
• Metrics types:
  • CPU
  • Disk
  • Memory
  • Network
  • Number of active instances
• Reporting types: Regular reports

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Backup and recovery

• Backup and recovery: Yes
• What’s backed up:
  • Virtual machines
  • Folders and Files
  • Mail Servers
  • Application servers
  • Databases
  • Microsoft 365
  • Sharepoint Online
• Backup controls: Users have access to full backup and restoration functionality via a console or web interface. Please see our Cloud Online Backup service description for more information.
• Datacentre setup: Multiple datacentres with disaster recovery
• Scheduling backups: Users schedule backups through a web interface
• Backup recovery:
  • Users can recover backups themselves, for example through a web interface
  • Users contact the support team

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)
  • Other
• Other protection between networks: Exponential-e are a Stage 3 accredited HSCN CN-SP and our network operability conforms to HSCN Framework Obligations.
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)
  • Other
• Other protection within supplier network: Exponential-e are a Stage 3 accredited HSCN CN-SP and our network operability conforms to HSCN Framework Obligations.

Availability and resilience

• Guaranteed availability: Availability is calculated on a calendar monthly basis using a 730 hour month. Each shared IaaS platform is provided with a 99.9% availability SLA. Replicated and HA VMs will target 99.95% availability. The Service Credit is applied as a percentage of the IaaS Platform Monthly Charge for the HA-VMs and Replicated VMs that are Unavailable (calculated on a pro-rata basis). Monthly Charge is the Annual Charge divided by 12. > 0.01 Below required level 5%> 0.1 Below required level 10% > 0.5 Below required level 15%
• Approach to resilience: We leverage multiple minimum-Tier III grade UK data centres with all services designed on fully redundant physical architecture. Combined with our backup and replication technologies, customers can achieve maximised availability and service resilience.
• Outage reporting: Service report outages are reported in real-time via: - a customer dashboard - email alerts

Identity and authentication

• User authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: Details available on request.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password
• Devices users manage the service through:
  • Dedicated device on a segregated network (providers own provision)
  • Dedicated device on a government network (for example PSN)
  • Dedicated device over multiple services or networks
  • Any device but through a bastion host (a bastion host is a server that provides access to a private network from an external network such as the internet)
  • Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

• Access to user activity audit information: Users receive audit information on a regular basis
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users receive audit information on a regular basis
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: BSI
• ISO/IEC 27001 accreditation date: 12/04/2024
• What the ISO/IEC 27001 doesn’t cover: Details available on request
• ISO 28000:2007 certification: No
• CSA STAR certification: Yes
• CSA STAR accreditation date: 12/04/2024
• CSA STAR certification level: Level 3: CSA STAR Certification
• What the CSA STAR doesn’t cover: Details available on request
• PCI certification: Yes
• Who accredited the PCI DSS certification: PCI Self-Assessment
• PCI DSS accreditation date: 08/11/2023
• What the PCI DSS doesn’t cover: Details available on request.
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications:
  • SOC Type 2
  • BS 10012 Personal Information Management
  • HSCN Stage 3 Compliance
  • ISO 9001 - Quality Management
  • ISO 27017 - Private Cloud Security
  • ISO 20000-1 - Service Management
  • BS 10012 - Data Protection (GDPR)
  • ISO 22301 - Business Continuity
  • ISO 50001 - Energy Management
  • ISO 14001 - Environmental Management

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • CSA CCM version 3.0
  • ISO/IEC 27001
  • Other
• Other security governance standards: Exponential-e are CAS(T) and Stage 3 accredited HSCN CN-SP and our network operability conforms to HSCN Framework Obligations.
• Information security policies and processes: Exponential-e operates an ITIL standards service desk and change management process, ensuring that all changes are reviewed and approved by approproiate level prior to implementation. Customers are notified of change activity initiated by Exponential-e, while customers nominate a change approver for customer-initiated requirements.

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: Details available on request.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: Details available on request.
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: Details available on request.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: Details available on request.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Separation between users

• Virtualisation technology used to keep applications and users sharing the same infrastructure apart: Yes
• Who implements virtualisation: Supplier
• Virtualisation technologies used: VMware
• How shared infrastructure is kept separate: Services separation is assured by assurance of service design. Services management separation is assured by service design

Energy efficiency

• Energy-efficient datacentres: Yes
• Description of energy efficient datacentres: • All our Data Centres are ISO14001 accredited organisations with robust environmental management systems • Procuring consumed energy from sustainable energy sources wherever possible • Ensuring the use of hot/cold aisle cooling design in our Data Centres, which reduces energy consumption as the cooling is more efficient and helps our customers to reduce their carbon footprint

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  MAC 4.1: Delivering environmental benefits Exponential-e is committed to continually improving environmental performance and monitoring environmental effects from our activities to identify potential areas for improvement. We are accredited and operate within internationally recognised management standards (9 ISO’s) of which two are focused on Environment Management (ISO 14001:2015) and Energy Efficiency (ISO 50001:2015). This standard specifies the requirements for establishing, implementing, maintaining and improving an energy management system with a systematic approach in achieving continual improvement of energy performance, including energy efficiency, energy security, energy use and consumption. Critical to our core operation is our national network infrastructure, and cloud infrastructure. Thanks to unique cooling technology, our Data Centres are the most environmentally efficient in the UK. They save customers on average around £1.1 million per megawatt and 6,000 tonnes of taxable carbon annually compared with an average Data Centre facility. Some of the practices deployed to achieve carbon footprint include: • All our Data Centres are ISO 14001 accredited with robust environmental management systems • Procuring consumed energy from sustainable energy sources wherever possible • Ensuring the use of hot/cold aisle cooling design in our Data Centres, which reduces energy consumption as the cooling is more efficient and helps our customers to reduce their carbon footprint • Using the latest virtualisation (VDC) technologies to ensure the most efficient utilisation of hardware resulting in the overall optimisation of our client’s infrastructure. Our VDC delivers dedicated processing instead of having multiple, underutilised physical servers, which helps minimise our environmental impact • The business considers the environmental impact of goods and services within procurement processes. Working with suppliers, contractors and indeed clients to lessen the environmental impact of their operations. • Homeworking practices have been developed to allow homeworking whilst preserving security of company data and access to IT systems.

  Covid-19 recovery

  MAC 1.5: Improvements to workplace conditions Exponential-e operates to ISO22301 – Business Continuity Management System (BCMS) standard. This means our critical business functions have existing and proven business continuity plans which are reviewed, exercised and/or tested regularly. In line with this standard, we have taken the following steps: • Implemented flexible working arrangements for any high-risk employees, or employees who are unable to travel due to other reasons relating to the coronavirus (Covid-19) • Conducted a full Business Impact Analysis (BIA), considering shift patterns, physical segregation and cover arrangements across all of our core 24*7 service operations to maintain the appropriate resource levels • Implemented ongoing monitoring of our workforce and skills capability to ensure all our personnel are multi-skilled and have monitoring in place to address any weakness or gaps • Completed capacity planning and forecasting of the current and future levels of resource utilisation, taking into consideration the enactment of multiple Business Continuity scenarios • Introduced enhanced presence of our on-site cleaning personnel throughout the day and evening to ensure the cleanliness of our facilities is maintained • Initiated a change freeze across our core platforms to allow our key resources to focus on service availability and reacting to changes our customers may require • Limited any non-essential travel to customer or vendor sites, making the best use of remote technology to ensure we maintain our quality of service and open engagement throughout this period of uncertainty. Exponential-e has since initiated remote working at a larger scale in a controlled manner. Our Head Office has implemented a Hybrid working model for all staff who are able to work remotely for two days a week and in the office for maximum of three days a week. This also reduces our carbon emissions through travelling and heating/lighting of office premises.

  Tackling economic inequality

  MAC 3.1: Diverse supply chain Exponential-e maintains a policy of working with diverse partners and SME organisations where there is a defined benefit to our customers, and where the limitations of the contract or security requirements are not at risk in any way, which must be our overriding consideration. We reach out to our wider supply chain partners should any subcontracting opportunities arise during the contract duration. If any strategic supplier fails to deliver and thus breaches the terms of their contract, we will invoke the use of alternative and pre-qualified suppliers. We plan for these contingencies and maintain a supply chain that does not rely on any single source of fulfilment. MAC 3.2: Supporting innovation & disruptive technologies We will hold regular engagements, in which we will review, present, and collaborate on new technology and commercial initiatives throughout the life of the contract, and (when applicable), driving equality throughout our supply chain. MAC 3.3: Scalable & future-proofed methods to modernise delivery/increase productivity We work with innovative and agile supplier organisations who bring innovative technology solutions to market, by providing a framework to enable the deployment of their services within our stable and risk-controlled corporate environment. MAC 3.5: Manage cyber security risks Exponential-e maintains Cyber Essentials Plus and ISO 27001 accreditations. Additionally, Exponential-e operates a 24 x 7 x 365 CSOC desk to alert for any cyber security issues and potential risks. Our CSOC is built using trusted Unified Security Management (USM) technology, which unlike other SIEM software, combines powerful SIEM and log management capabilities with other essential security tools such as asset discovery, vulnerability assessment, intrusion detection (NIDS and HIDS) to provide a centralised security monitoring of networks and endpoints, all through a single pane of glass.

  Equal opportunity

  MAC 5.1 Provision of inclusive working environment As a commitment to reducing the disability employment gap Exponential-e has adopted a hybrid working model that allows flexibility. Hybrid working, sometimes referred to as "blended working", is a form of flexible working that allows employees to split their time between attending the workplace and working remotely (typically from home). MAC 6.1: Tackling inequality in the contract workforce We are committed to equal pay for the contract workforce. To address our gender pay gap, we have a number of initiatives in place, to not only attract more female talent, but to encourage a more balanced, and rewarding workplace: • Working with educational institutions to help attract more women into STEM focused roles • The data shows that the disparity in the bonuses paid is due to the fact there a very few women in senior sales positions. We have a junior sales mentoring programme for both men and women, equally, to encourage progression into senior sales roles, especially for women • Training is available to cover areas like Equality & Diversity, Unconscious Bias • We have established a Women’s Working Group who will assist in supporting the attraction, retention and promotion of our female talent across the business • Flexible working arrangements for all staff to encourage work life balance. Placement Programme & Apprenticeships Every year Exponential-e offers placements and apprenticeships to students whose degrees would benefit from working in an operational technical environment. The students are paid, which allows them to practice the theory learnt in the classroom in a real world environment; while also supporting themselves financially. As part of our commitment to the Government’s Apprenticeships Levy Programme we actively work with registered apprenticeship companies to provide upskilling opportunities to employees across a range of subjects.

  Wellbeing

  MAC 7.1: Support health and wellbeing in the workforce All staff are eligible to join our Private Health scheme (on completion of probationary period) run by Vitality which actively encourages physical and mental wellbeing through a broad variety of programmes design to promote and incentivise wellbeing. Exponential-e has also implemented the six standards in the Mental Health at Work commitment and where possible follows the mental health enhanced standards in Thriving at Work, as follows: 1. Prioritise Health Wellbeing Through Systematic Programme of Activities Exponential-e partnered with Care first as an Employee Assistance Programme (EAP) to provide online and counselling services to all our employees. 2. Work Design & Culture Drives Mental Health Outcomes Exponential-e offers the following benefits package for all eligible employees - Life Assurance, Private Medical Scheme, Employee Assistance Programme, Ride to Work Scheme, Season Ticket Loan, Employee Referral Scheme and Purchase of Holiday Scheme. 3. Promote Open Culture Around Mental Health Exponential-e has seen a huge shift in attitudes to mental health and we promote and support employees to think and talk about their mental health which subsequently helps the organisation to thrive. 4. Increase Organisational Confidence & Capability Exponential-e recognises the importance of leadership and management development and provides programmes designed to upskill our managers and strengthen our leadership capabilities. 5. Provide Mental Health Tools & Support Exponential-e partners with Care first as an Employee Assistance Programme (EAP) to provide online and counselling services to all our employees, including a series of webinars including stress awareness, social anxiety, long Covid, how weather can affect mood and behaviour, financial wellbeing, and breaking bad habits. 6. Increase Transparency/Accountability Through Reporting Annual Employee Opinion Surveys are used to drive improvements. A monthly Employee Engagement Pulse Survey helps to keep our finger on the pulse of the organisation.

Pricing

• Price: £0.10 a gigabyte a month
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at psbids@exponential-e.com. Tell them what format you need. It will help if you say what assistive technology you use.