Vodafone Limited

Secure Cloud Storage and Back Up

Total amount of data created by users and applications continues to grow and forecast to increase over the coming years. Vodafone’s Storage and Backup services are designed to support end-to-end data storage strategy including business specific storage compliance requirements across multiple platforms.

Features

• Pay-as-you-go storage with no hidden costs
• Scalability on demand
• Reduce storage costs
• Secure connectivity options
• Internet connectivity
• Vodafone IP-VPN connectivity
• Direct Connection in select Vodafone data centres
• Quick to implement

Benefits

• Four different services to select based on your business needs
• Flexes up and down with your demand
• Zero capital outlay
• ISO/IEC 27001 certified platform
• Enables you to deploy new applications faster
• Cloud-based solutions save time and money
• Applications can be deployment quickly and data management automated

£0.15 to £0.28 a unit a month

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at frameworks_team@vodafone.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

478285799489302

Contact

Frameworks Team
03333 040191
frameworks_team@vodafone.com

Service scope

• Service constraints: None
• System requirements: None

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Please refer service definition for more detail
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Vodafone categorizes support into severity levels as follows: Severity 1 resolution within 4 business hours - defined as a total Loss of service affecting entire sites or the core Vodafone network or any elements of the platforms used by the customer, impacting a majority or all of the customer’s end-users. This excludes incidents outside of Vodafone control. Severity 2 resolution within 8 business hours - The loss of some but not all Vodafone services to a single or multiple sites. Severe degradation of a service to such an extent that it is not usable. For example, unable to use speech recognition, but able to make and receive calls. Severity 3 resolution within 48 hours - The degradation of, but not the loss of Vodafone services to a site or a number of sites. For example, poor voice quality while still able to make and receive calls.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: On-boarding guidance is provided as part of the service. When the Cloud Storage service is ready the customer will be provided with the following: I. Order live document – contains account information and guidance II. Quick start guide – this will be populated with the customers network information and covers the most common connectivity scenarios, providing configuration advice where needed (in some cases Vodafone will carry out this work for the customer) III. Connectivity handover (optional) – the Hosting Design team will engage the customer to test connectivity (the customer will have to consult the quick start guide first) IV. Portal user guide – a how to guide for customer administration (not provided for Managed Cloud Storage Applications customers).
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Advise Vodafone help desk that you want to stop using Cloud Storage and we’ll close your account, giving you 30 days before removing any remaining data. Vodafone may also be able to help you minimise the impact of off-boarding through our professional service capability.
• End-of-contract process: Exit charges may apply.

Using the service

• Web browser interface: Yes
• Using the web interface: The service is accessed through the internet and can access a portal. Portal users can either be Account Managers or Account Users. Account Managers have access to create, edit, and remove user accounts. Account Users cannot see the Manage Users screen, however, Account Users can login to the portal and view reports and statistics for the sub-tenancy.
• Web interface accessibility standard: None or don’t know
• How the web interface is accessible: It is accessible anywhere through an internet connection over HTTPs and end to end security can be assured by using Vodafone's secure networks.
• Web interface accessibility testing: None directly for this service as access is through end user devices
• API: Yes
• What users can and can't do using the API: Vodafone Cloud Storage is available over the network via web service. All data must be accessed through web service calls. Vodafone will provide the API to access web service calls. If the application itself is developed to write to this Cloud Object Storage. Vodafone Cloud Storage uses EMC Atmos® technology, and therefore the API calls are compliant with the API standards developed and maintained by EMC Corporation. Any application which works with EMC Atmos® should work with Vodafone Cloud Storage and any software code created for Vodafone Cloud Storage should work with any EMC Atmos® node. Atmos provides RESTful and SOAP based web services APIs for data access and administration.
• API automation tools: Other
• Other API automation tools: Any programming language that supports web API calls
• API documentation: Yes
• API documentation formats: PDF
• Command line interface: No

Scaling

• Scaling available: Yes
• Scaling type: Manual
• Independence of resources: Vodafone centrally monitors the platform performance and utilisation and manages any capacity expansions necessary to prevent service performance bottlenecks
• Usage notifications: Yes
• Usage reporting: Other
• Other usage reporting: Can depend on the level of service the customer chooses, but will be either via email or phonecall

Analytics

• Infrastructure or application metrics: Yes
• Metrics types:
  • Disk
  • Other
• Other metrics: Bandwidth activity.
• Reporting types: Real-time dashboards

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: Kyndryl Support Services

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest: Physical access control, complying with another standard
• Data sanitisation process: No
• Equipment disposal approach: A third-party destruction service

Backup and recovery

• Backup and recovery: Yes
• What’s backed up:
  • Near-line (on site) and off site backup
  • Restore customer data
  • Covering file application
• Backup controls: Customer's backup applications manage backup & recovery policies/procedure. In case required, Cloud Storage Applications (such as Vodafone's Cloud Storage Gateway) could also be purchased. Furthermore, by opting for the Gold service, data stored on Cloud Storage is securly replicated across remote sites (within UK) automatically, ensuring geographic resilience.
• Datacentre setup: Multiple datacentres with disaster recovery
• Scheduling backups: Users contact the support team to schedule backups
• Backup recovery: Users contact the support team

Data-in-transit protection

• Data protection between buyer and supplier networks: Legacy SSL and TLS (under version 1.2)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Legacy SSL and TLS (under version 1.2)

Availability and resilience

• Guaranteed availability: Service availability up to 100% can be made available with resilience. within the datacentre and dual site replication. Customers can choose from pre-defined service tiers to control how data is protected. The Gold service replicates your data automatically, providing availability from two Cloud Storage sites. While Gold and Silver tiers both provide self-healing.
• Approach to resilience: There are multiple protection policies to choose from and the replication policy affects the resiliency of the data and the number of copies of the object. Each customer’s sub tenancy on the storage is setup with a default policy. That default policy will be used unless another policy parameter is passed to the API. Each policy is implemented with erasure coding and checksum in each location, and may include replication to another region if the policy names more than one data centre campus.
• Outage reporting: Great emphasis is placed by Vodafone on monitoring and proactive identification of incidents; The Vodafone Service Desk will raise a proactive trouble ticket and initiate first line diagnostics. The Service Desk will contact the affected users/site to determine the business impact and identify any potential causes for the faults e.g. local site power issues. Vodafone will work with the customer to identify the most effective contact points for the various levels of escalation needed to resolve the issue.

Identity and authentication

• User authentication:
  • 2-factor authentication
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
• Access restrictions in management interfaces and support channels: Portal users - the first user ID and password created when the account is established is the Administrative ID for your storage sub-tenancy, will be used to manage the portal accounts. Additional user ID’s can be created and used to have other roles, privileges. Manage User screen can be found upon selecting Your Account in top right corner. Portal users can either be Account Managers or Account Users. Account Managers have access to create, edit, and remove user accounts. Account Users cannot see the Manage Users screen, however, can login to the portal and view reports, statistics for the sub-tenancy.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Username or password
• Devices users manage the service through: Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: LRQA are Vodafones ISO27001:2013 accreditor
• ISO/IEC 27001 accreditation date: 01/01/2024
• What the ISO/IEC 27001 doesn’t cover: Please contact us for details of our certificate
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: Yes
• Who accredited the PCI DSS certification: NCC Group
• PCI DSS accreditation date: Various
• What the PCI DSS doesn’t cover: Vodafone holds 5 PCI DSS certificates covering: Retail Environment Voice Payments eShop PCI Zone - multi channel payments Functions and process not involved in the processing of payment card data
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications: ISO22301:2015 for all Vodafone UK business units and functions

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: All detailed in the UK and Group policy library and governed by the UK policy framework. Key polies are Information Security, Classification & materials handling, Vulnerability and Patch management, risk management, change management, incident management.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Formal management responsibilities and procedures within Vodafone are in place to ensure satisfactory control of all changes. When changes are made, an audit log containing all relevant information is retained on the Vodafone change management system. Changes to operational systems are only made when there is a valid business reason to do so, such as an increase in the risk to the system.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Vulnerability scanning is performed by industry standard a vulnerability management platform. Governance is in place to ensure that appropriate patching and/or remedial action is reviewed and implemented according to the severity and business impact of the vulnerability.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Vodafone has logging and monitoring capabilities in place along with appropriate storage of log data. The monitoring capability and events are managed and stored within the SIEM solution. The SIEM solution has been built in line with the Cyber Assessment Framework
• Incident management type: Supplier-defined controls
• Incident management approach: Incident management processes are in line with ITIL best practice, and integrated with event, problem and change management processes.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Separation between users

• Virtualisation technology used to keep applications and users sharing the same infrastructure apart: Yes
• Who implements virtualisation: Supplier
• Virtualisation technologies used: VMware
• How shared infrastructure is kept separate: Cloud Storage supports access by multiple tenants, where each tenant is defined by a namespace and the namespace has a set of configured users who can store and access objects within the namespace. The key characteristic of a namespace is that users from one namespace cannot access objects belonging to another namespace.

Energy efficiency

• Energy-efficient datacentres: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  We believe that urgent and sustained action is required to address the climate emergency. Business success should not come at a cost to the environment, and we are committed to ensure the greening of all our activities. We also see a key role for our digital networks and technologies in helping to address climate change. Digitalisation is key to saving energy, using natural resources more efficiently and creating a circular economy.; Our carbon reduction targets support those introduced in 2019 when the UK Government amended the Climate Change Act 2008 by introducing a target of at least a 100% reduction of greenhouse gas emissions in the UK by 2050. Vodafone’s own target, validated by the Science Based Target initiative, is to achieve net zero by 2040. We produce an annual Carbon Reduction Plan in line with PPN 06/21 which outlines the environmental management measures that will be applied in the performance of our contracts.; The Carbon Reduction Plan is published on our website here: Protecting the Planet | Vodafone UK

  Covid-19 recovery

  Covid-19 recovery; At Vodafone, we believe that everyone, everywhere should have access to technology. That is why our initiative – everyone.connected – was launched during the pandemic to close the digital divide.; The COVID-19 pandemic has caused a global economic crisis, creating a greater need for focus on inclusion and equality. As a technology brand, we are determined to support those who need it most – students, jobseekers, small businesses, remote communities and the elderly. This is because we know that being connected creates endless opportunities; from remote working, to education and staying in touch.; We will keep doing all we can to make sure nobody is left behind – because when people are connected, equal opportunities are created and the future is brighter. ; The programme has continued post-COVID and we are now committed to helping 4 million UK people and businesses cross the digital divide by the end of 2025. Details on our programme and our on-going commitments ; can be found here: everyone connected | Tackle the digital divide | Vodafone UK

  Tackling economic inequality

  Tackling economic inequality; Vodafone is committed to tackling economic inequality by helping to create new businesses, jobs, and skills. Since forming in Newbury, Berkshire in 1982, we have purchased products and services globally to innovate and achieve business growth.; Today, Vodafone works with over 9,000 suppliers. We’re strong advocates of the ‘one company, local roots’ concept. By creating opportunities for new businesses and supporting supply chain resilience, we enable our suppliers to recruit and grow. In turn, our partners maintain their own diverse supply chains of smaller, local partners, technology start-ups and market specialists. ; We encourage small and medium sized enterprises in our own supply chain, e.g. by offering them positive scoring in our RFQ process (which has a 20% weighting for sustainability responses) if they commit to introducing policies that align with Vodafone’s purpose. In this way, we aim to drive positive change in the supply chain. ; ; Vodafone is committed to tackling economic inequality for disadvantaged groups and areas. We support the UK Government’s ‘Good Work Plan’, the levelling up agenda and the Government’s priorities such as reduced reoffending and increased opportunities for disabled people. We work with leading public service provider, PeoplePlus, to help create opportunities for individuals from lower income households who may face barriers to employment. They are a national UK wide company and extension of the UK Job Centre who aim to deliver skills and training to ensure people can access the right employment and enhance their career prospects.; ; Vodafone’s work experience strategy addresses the underrepresentation of certain groups across the Technology workforce. We have offered work experience to over 4000 students since 2017 through programmes such as #CodeLikeAGirl and Innovators virtual work experience programme. Both programmes target a proportion of ethnic minority, female, and low social mobility students.

  Equal opportunity

  Equal opportunity; We are committed to equal opportunities in our workforce. Through our recruitment processes we:; o use gender neutral advertising for vacancies posted, running the advertisements through a gender decoder; o actively ensure diverse shortlists are provided to hiring managers as well as having diverse interview panels to ensure the candidate feels as comfortable as possible throughout the process; o Limit the “criteria/ essential” skills and reduce technical jargon where possible; o Anonymise CVs removing names, pro-nouns and photos ; o Remove university education from CVs ; o Run training for hiring managers on topics such as inclusive hiring, race and ethnicity, accessibility, discrimination, allyship and gender diversity. ; o Run campaigns related to diversity and inclusion with an intersectional approach aimed at increasing brand awareness and perception of Vodafone as a diverse and inclusive employer, as well as job applications. ; o Partner with external organisations to help create opportunities to attract greater diversity into our workforce. These include myGWork, a network for LGBTQ+ talent, Black Young Professionals network, and Evenbreak who have a community of 70,000 talent with disabilities.; o We have publicly available Fair Pay Principles that govern our approach to reward. ; ; Vodafone has come together with Ofcom and other organisations to sign Women in Tech, a pledge committing to promote the role of women in technology-based roles in the telecoms sector. We are committed to work together to increase senior representation of women, share best practice and help to drive change in Vodafone and across the industry. Our company goal is 45% women in management roles by 2030.; ; We have a range of employee networks who advocate for different groups including groups for LGBTQ+, BAME and disabled employees. We are signatories of the Race at Work Charter, Disability Confident Scheme and Hidden Disabilities Sunflower Scheme.

  Wellbeing

  Wellbeing; Vodafone’s Group Health, Safety and Wellbeing Policy expands on the Code of Conduct, setting out our commitment to establish a robust and durable health, safety and wellbeing culture. This policy is accompanied by detailed standards setting out the specific steps that must be taken to manage our greatest risks.; https://www.vodafone.com/about-vodafone/who-we-are/people-and-culture/workplace-safety/our-approach-to-safety; ; We have a multi-faceted employee wellbeing programme which covers:; • Physical health, including discounted gym membership, free access to a remote GP and discounted/free health assessments.; • Emotional and mental health. Silvercloud is a digital self-help support platform, endorsed by the National Institution of Health Care Excellence (NICE) as being an effective tool to maintain and improve wellbeing. Employees can access a variety of programmes including: Sleep, stress, resilience, Covid-19, positive body image, mindfulness, money worries.; • Financial wellbeing. We offer a personalised financial education tool.; ; Our commitments to wellbeing are supported by industry leading HR policies, e.g. our enhanced Maternity/Paternity Policies and a flexible working culture. We run an award-winning ReConnect return to work programme for those who have taken career breaks due to caring responsibilities. Our commitments are recognised externally, and we continue to be ranked as one of the UK’s top 10 ‘Best Workplaces’.

Pricing

• Price: £0.15 to £0.28 a unit a month
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at frameworks_team@vodafone.com. Tell them what format you need. It will help if you say what assistive technology you use.