INSIGHT DIRECT (UK) LTD

Lightning Agentforce 360 Platform (formerly Lightning Salesforce Platform)

Lightning Salesforce Platform is a trusted, flexible, secure, and scalable unified platform powered by AI agents, data, and CRM apps. Build and customise meaningful experiences with clicks or code for web or mobile. It supports AI, analytics, automation, and backend integration with open APIs.

Features

• Build, deploy, manage AI agents at scale for real outcomes.
• Unify data with trusted metadata and semantics for accuracy.
• No-code & Low-code declarative configuration, Open API integration, Training included.
• Protect agents/workflows with built-in security, automated threat remediation, policy controls.
• Transform data into real-time, explainable insights, predictions and recommendations.
• Create a single federated identity across all your cloud apps.
• Create the perfect user experience with Lightning; anyone can customise.
• Solve business problems using declarative tools, without needing code.
• Extend & scale your enterprise with trusted partners, apps, integrations.
• Operate confidently on Hyperforce, the secure, compliant, high-performance platform foundation.

Benefits

• Transform data into real-time, explainable insights for every decision.
• Enable companies to operate with intelligence and speed.
• Rapid, flexible app development using no-code, low-code, or code.
• Scale on demand, test in sandboxes, deploy on any device.
• Eliminate time, cost, complexity, and frustration of traditional IT systems.
• Integrate easily to existing systems and mobile enable legacy data.
• Enhance process automation and decision-making with personalised, trusted AI.
• Access a vibrant ecosystem with over 7,000 pre-built applications.
• In-built security and identity model helps save time and money.
• Enable GDPR, CE+ compliance, align with accessibility and GDS standards.

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at pstenderteam@insight.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

500230262887595

Contact

Public Sector Tender Team
0344 846 3333
pstenderteam@insight.com

About your service

• Service categories:

  PaaS

  Application Platforms

  • Deployment-centric application platforms
  • Model-driven application platforms

Service scope

• Service constraints: Key considerations (further detail in our Supplier Terms): As Salesforce is multi-tenant, there are 'governor limits' which prevent resources from being monopolised by any single organisation. NB though these limits exist it is rare for customers to be impacted, and even more unusual for our current Public Sector customers. In the unlikely event of a need to increase, limits can be extended with various add-ons separately listed. Hitting a limit is often a sign of an underlying design flaw. Please make yourself aware of these limits: https://developer.salesforce.com/docs/atlas.en-us.210.0.salesforce_app_limits_cheatsheet.meta/salesforce_app_limits_cheatsheet/salesforce_app_limits_features.htm. A user’s password may not be shared with any other individual.
• System requirements:
  • A standard browser, either desktop or mobile
  • Connection to the internet
  • Salesforce mobile app is available if preferred to a browser
• Cloud deployment model: Public cloud

User support

• Email or online ticketing support: Yes
• Support response times: Every Salesforce service includes support as standard. The lowest level relies on the Salesforce user community for responses and has a response time of 2 business days, this can be reduced to 15 minutes with the appropriate upgrade in your support plan. ; https://www.salesforce.com/en-us/wp-content/uploads/sites/4/documents/datasheets/premier-success-plans-datasheet.pdf
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: Yes
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: WCAG 2.2 AA
• Web chat accessibility testing: Our webchat products have been assessed against WCAG 2.2 standards. Details of this compliance are described in our Voluntary Product Accessibility Template (VPAT) statements (available at: https://www.salesforce.com/company/legal/508_accessibility/). While formal usability studies with assistive technology have not been conducted, the services have been robustly assessed against WCAG 2.2
• Onsite support: Yes, at extra cost
• Support levels: Every Salesforce service includes community-based support. This can be enhanced with guaranteed response times through Premier Success. For more critical applications we provide Signature Success which provides Salesforce staff with a knowledge of a specific customers applications and configurations and an initial response from your designated support team in as little as 15 minutes, with personalised updates every 30 minutes.
• Support available to third parties: Yes
• AI chatbot: Yes

Onboarding and offboarding

• Getting started: Salesforce provides an amazing immersive self-learning environment available called “Trailhead” for anyone who would like to have an engaging and interactive way of learning about salesforce. It is an online and free to use learning environment available here: https://trailhead.salesforce.com/ ; ; In addition, Salesforce's Customers for Life is designed to help customers be successful and get up and running quickly. A dedicated group is available for new customers to engage by asking questions, giving feedback, and sharing experiences. this also includes 'Getting Started Webinars', 'Getting started resources', 'Salesforce Tech-lounge for new customers' and 'getting started live Q&A' further detail available at https://www.salesforce.com/success-gettingstarted/
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
  • Other
• Other documentation formats:
  • Free online courses referred to as Trails
  • Further information available https://trailhead.salesforce.com/en/trails
  • Each designed with a specific purpose and skill in mind
  • Dedicated website called Trailhead gives access to these Trails
• End-of-contract data extraction: The administrator for a given Salesforce environment can export (subject to appropriate permissions being set) data to a series of files securely using the weekly export function. Further information can be found at this link https://help.salesforce.com/articleView?id=admin_exportdata.htm&type=5; ; As the function suggests this data export can be performed weekly (dependent on the version procured) for backup purposes if required.
• End-of-contract process: Within 30 days post contract termination, customers may request return of their respective Customer Data submitted to the Covered Services. Salesforce shall provide such Customer Data via downloadable files in comma separated value (.csv) format and attachments in their native format.; ; After termination of all subscriptions associated with any of the Covered Services (“Subscription Termination”), Customer Data submitted to the Covered Services may remain in inactive status for up to 120 days. After such period, Customer Data will be overwritten or deleted from production within 90 days. Customer Data will be deleted from backups within 300 days of Subscription Termination. ; ; This process is subject to applicable legal requirements. Without limiting the ability for customers to request return of their Customer Data submitted to the applicable Covered Services, Salesforce reserves the right to reduce the number of days it retains such data after termination of the Covered Service. Salesforce will update this Security, Privacy, and Architecture Documentation in the event of such a change.; ; Please refer to the """"Deletion of Customer Data"""" section of the Security, Privacy and Architecture Documentation for the respective services available on the Trust and Compliance site: https://trust.salesforce.com/en/trust-and-compliance-documentation
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Using the web interface: Salesforce is a 100% web-based tool, therefore all functions are possible through the web interface; ; Point-and-click configuration: The Salesforce platform makes it easy to modify the functionality of Salesforce applications to meet your unique requirements. Working with the metadata framework and a series of simple point-and-click visual tools, you can design custom user interfaces, modify the structure of the data model and create and edit application business logic and processes. Configuration enables organisations to modify objects, fields, validation rules, workflow, security settings, formulas, even artifical intelligence and much more without the need for deep coding or data science expertise.; ; Customise with code: Although point-and-click configuration with the Salesforce platform is the fastest and easiest way to customise, some functionality is beyond the constraints of a metadata framework. For such cases, developers can create needed functionality in open-ended development environments, using toolkits for most of the common programming languages, or Apex.
• Web interface accessibility standard: WCAG 2.2 AA
• Web interface accessibility testing: The accessibility standards for our core services are governed by the WCAG 2.2 Level AA guidelines. We utilise the accessibility standards set forth by Salesforce, which follows international best practices, including Section 508 of the U.S. Rehabilitation Act and actively strives to meet WCAG 2.2 Level AA.
• API: Yes
• What users can and can't do using the API: Salesforce provides a rich set of APIs for programmatic interaction, data integration, and platform customisation, including:; REST API: Simple, powerful web service for accessing Salesforce data (CRUD) for web/mobile apps.; SOAP API: Robust, WSDL-based web service for enterprise integrations needing strong type-checking and complex transactions.; Bulk API 2.0: Optimised for asynchronously loading/deleting large datasets efficiently.; Metadata API: Manages and deploys configuration changes between Salesforce organisations.; Streaming API and Pub/Sub API: Enable real-time data synchronisation via platform event subscriptions and data change notifications.; These APIs enable developers to extend, integrate, and build custom solutions on the Salesforce platform.; A Tooling API is specifically designed to help developers build IDE apps for salesforce, while the metadata API is for more general purpose configuration migration. The Tooling API gives developers a platform for debugging, code coverage, auto complete, and more. The metadata API allows for migrations, including retrieve, deploy, create, update, or delete customisations for your Salesforce instance and migrate changes from testing to production.
• API automation tools: Other
• Other API automation tools:
  • Salesforce Developer Console
  • Visual Studio Code - with Salesforce Extension
  • Welkin Suite
  • Illuminated Cloud - JetBrains
  • Cloud 9 - AWS
  • Other IDE may be used via the Tooling API
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
  • PDF
• Command line interface: Yes
• Command line interface compatibility:
  • Linux or Unix
  • Windows
  • MacOS
  • Other
• Using the command line interface: The Force.com CLI allows you to work with Force.com data directly from the command line. You can Browse and Create Force.com objects, view, edit, create, and delete records, execute APEX code and SOQL queries, and more.; https://developer.salesforce.com/tools/sfdxcli

Scaling

• Independence of resources: The Salesforce capacity planning team is responsible for ensuring service owners have the right capacity in the right place on time. To do this, we construct build plans taking into account many factors such as:; Product feature changes; User behavior; Machine metrics; Business needs; ; As Salesforce Hyperforce runs on the public cloud, it is designed to leverage cloud-native scaling approaches. This allows our services to gracefully scale up as demand increases, and gracefully scale down again as demand subsides.; ; Trust.salesforce.com is Salesforce's website which provides transparent status details on service availability/performance to instil trust and confidence in our service.
• Usage notifications: No

Analytics

• Infrastructure or application metrics: Yes
• Metrics types: Other
• Other metrics:
  • Application usage
  • User metrics
  • Specific adoption, usage, and volumetric measures
• Reporting types:
  • API access
  • Real-time dashboards
• Resource tagging: Yes
• FOCUS resource tagging: Yes

Resellers

• Supplier type: Reseller (no extras)
• Organisation whose services are being resold: Salesforce Inc.

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
  • Other
• Other data at rest protection approach: By default, Salesforce encrypts customer data at rest as disk volumes are encrypted by using at least industry-standard AES-256 algorithm. Snapshots of encrypted volumes are automatically encrypted as well when replicated to long term storage.; ; In addition, Platform Encryption allows customers to add additional layers of encryption to their data and manage the lifecycle of their data encryption keys themselves.; ; More specifically, Platform Encryption allows customers to selectively encrypt nominated fields for encryption when stored in the database. This is often referred to as field encryption. Customers can also encrypt their entire database; this is known as tenant level encryption.
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase
  • Physical Destruction / Hardware containing data is completely destroyed

Backup and recovery

• What’s backed up:
  • Data
  • Metadata
• Backup controls: Salesforce’s platform includes backup as part of its service.; These additional backup options are also available:; Weekly Export Service - free local backup service.; Direct Export - into csv/Excel files from a list view or report. ; Salesforce Data Loader - a free tool for importing/updating/exporting data.; Salesforce API - export via APIs at any time.; Backup & Restore - our native data recovery service: https://www.salesforce.com/products/platform/solutions/data-security/backup-restore-data-recovery/ ; Partner Tools - pre-integrated third-party backup tools like Odseva, Own by Salesforce
• Datacentre setup: Multiple datacentres with disaster recovery
• Scheduling backups: Users schedule backups through a web interface
• Backup recovery: Users can recover backups themselves, for example through a web interface
• Backup and recovery: Yes
• RPO/RTO: Yes

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: The Salesforce Services are designed with the concept of continuous improvement and Trust (e.g. Availability, Performance and Security) in the infrastructure. Salesforce uses commercially reasonable efforts to make its on-demand services available to its customers 24/7, except for (minimal) planned downtime, for which Salesforce gives customers prior notice, and force majeure events. This service leverages Public Cloud region and uses multiple availability zones. This pattern allows services to withstand up to two different zonal faults and continue to be available. Live and historical statistics on Salesforce system performance are publicly published at: https://trust.salesforce.com/en/#systemStatus, and further detail can be shared upon request and NDA.
• Approach to resilience: Salesforce Hyperforce based cloud services has its compute resources run in 3 Availability Zone (AZ). Services run as containerized applications in containers which is configured for HA (high availability) by distributing nodes across AZs. To take advantage of this, service pods themselves are deployed across AZs when scheduled on nodes. Because of this when one AZ goes offline there will always be available service pods in different AZs to handle the workload. Service pods are also stateless so losing an AZ and nodes in that AZ along with the service pods running in them will cause no loss of data and new service pods will be scheduled on the available zones to handle the load.
• Outage reporting: Outage escalation policies are established and maintained as Salesforce's goal is to rapidly restore service. In the event of an extended outage, periodic updates are provided in near real time to customers via the trust.salesforce.com dashboard site and in addition, service notifications are provided to nominated contacts via various channels such as email. Update frequency for notifications is dependent on the customer support service plan.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password
  • Other
• Other user authentication: Salesforce has a comprehensive set of authentication mechanisms that customers can choose from. These include Multi-factor authentication, Single Sign-on, Custom Login flows, and Connected Apps. A connected app is a framework that enables an external application to integrate with Salesforce using APIs and standard protocols, such as SAML, OAuth, and OpenID Connect. Connected apps use these protocols to authenticate, authorise, and provide single sign-on (SSO) for external apps.; ; Salesforce requires each user to have a unique username that they enter at each login. Administrators can configure several settings to ensure that users' passwords are strong and secure.
• Access restrictions in management interfaces and support channels: Management access for service support and delivery is done through multiple layers of controls including, but not limited to, multiple 2 factor authentication, just-in-time access, access related to an approved trouble ticket and segregation of duties. These controls are in scope for SSAE-18 auditing and evidenced through the SOC 2/ISAE3402 report.; ; Access to the management interface for the customer to configure their salesforce environment, is configured by the customer themselves. Robust application design and testing ensures that users without administrative access rights cannot access more sensitive areas of the application.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Dedicated link (for example VPN)
  • Username or password
• Devices users manage the service through: Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • CSA CSM version 4.0
  • ISO/IEC 27001
  • Other
• Other security governance standards: ISO 27017,; ISO 27018,; ISO 42001,; ISO 9001,; SOC 1/2/3,; PCI DSS,; NCSC Cloud Security Principles,; UK NHS DSPT,; EU Cloud Code of Conduct.
• Information security policies and processes: Salesforce's Information Security Management System (ISMS) and information security policies are based on the ISO 27002 framework of best practices and are ISO 27001 certified. ; ; As required by this certification, the ISMS is endorsed by Senior Management. The Chief Trust Officer/CISO has responsibility for the information security policies and ISMS. The Salesforce Security Steering Committee approves/authorizes all changes to the policies, the Statement of Applicability (SoA), the information security manual, and any separate policy statements. ; ; During the ISO 27001 audit process (as well as other audits such as SOX and SSAE 16 SOC 1), senior management for various departments are involved in verifying that policies and procedures are in place and adhered to. Policies are reviewed/approved at least annually.; ; Company wide security awareness training highlights the importance of the security policies to employees and reinforces the company’s number 1 value of Trust.

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Changes to infrastructure components are made through code using industry standard Infrastructure as Code (IaC) software and assessed for their security impact before being deployed. Individuals who wish to deploy an IaC change into production are required to follow defined procedures and standards, and to complete mandatory change management training before participating in the change management process. A change must be approved and routed through the change owner before the change can be implemented. A ticketing system is used as part of the change management procedure which records the components and the changes made.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Salesforce includes threat modelling into its software development lifecycle to help ensure the risks associated with potential threats are mitigated as early as possible. Multiple threat intelligence sources are used to help understand the current and evolving threat landscape. ; ; Vulnerability scans are performed on all Salesforce information systems and hosted applications. Patches are deployed in timeframes based on CVSS scores and risk level. ; ; All vulnerabilities discovered during penetration tests are entered into the salesforce central ticketing system and are assigned an internal vulnerability ranking according on the OWASP risk rating framework based on likelihood and impact.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Salesforce Threat Intelligence and Detection team monitors the Salesforce services 24x7 for threats and unauthorized intrusions in collaboration with the Security Incident Response teams. Extensive logging and monitoring is conducted across all Salesforce Services and environments (at application, network and database layers). All suspicious activities are flagged and reported to Salesforce CSIRT for investigation, management, communication, and resolution of security events and incidents in line with the NIST Incident Response model
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: Salesforce has an Incident Management Process that guides the Salesforce Computer Security Incident Response team in investigation, management and resolution activities which includes developing standard pre-defined procedures for dealing with common events. ; ; Salesforce will promptly notify the customer in the event of any security breach of the Service resulting in an actual or reasonably suspected unauthorized disclosure of Customer Data. Notification may include phone contact by Salesforce support, email to customer's administrator and Security Contact and public posting on trust.salesforce.com.; ; Customers can email security@salesforce.com or use the https://security.salesforce.com/contact page to report incidents.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Separation between users

• Virtualisation technology used to keep applications and users sharing the same infrastructure apart: No

Energy efficiency

• Energy-efficient datacentres: Yes
• Description of energy efficient datacentres: Salesforce is hosted on Hyperforce (AWS Data Centres). AWS is committed to energy efficiency and has implemented a number of measures to reduce energy consumption in its datacenters.; AWS participates in the EU Code of Conduct for Energy Efficiency in Data Centres program and has committed to following the program's best practices for energy efficiency.; AWS datacenters use energy-efficient technologies, such as high-efficiency power supplies, variable-speed fans, and energy-efficient lighting.; AWS has implemented a number of measures to reduce energy consumption in its datacenters, such as server virtualisation, efficient cooling systems, and advanced power management techniques.; AWS regularly monitors and reports on its energy consumption and has set ambitious goals for reducing its energy usage and carbon footprint.; Overall, AWS is committed to adhering to the EU Code of Conduct for Energy Efficient datacenters and is taking steps to reduce energy consumption and improve energy efficiency in its datacenters.; https://www.applytosupply.digitalmarketplace.service.gov.uk/g-cloud/services/703618249207207#:~:text=AWS%20participates[…]0for%20energy%20efficiency; https://sustainability.aboutamazon.com/carbon-reduction-aws.pdf

Pricing

• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: Fully functional limited by time, or limited user without expiry
• Link to free trial: Please contact us for a current link

Discount

• Provide your minimum discount applicable to your baseline prices: 0%

Formula for calculating price of your services

• Formula for calculating price of your services:

  Which of the core deployment models you intend to offer

  • Public Cloud
  • Private Cloud

  Public Cloud - Formula for calculating price of your services

  ---

  Total Cost

  The Total Cost for a buyer's call off requirement in a Public Cloud Deployment

  =

  Baseline Pricing

  G-Cloud Digital Marketplace

  Baseline Pricing - Web link

  https://www.gov.uk/digital-marketplace

  -

  Minimum Discounting

  0%

  +

  Onboarding Activity

  Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process

  +

  Additional sources of cost

  Unmanaged cloud activity can increase costs and risk for public sector buyers. Key drivers include data movement (inter‑region/zone egress, CDN origin fetches, Azure ExpressRoute metered egress, AWS NAT Gateway, Google Cloud Interconnect/NAT), storage and backup (snapshot sprawl, cold‑tier retrieval, Azure Archive rehydration, AWS Glacier tier fees, Google Coldline early deletion), compute/database inefficiencies (oversized instances, unattached disks/IPs, mis‑tuned autoscaling, misaligned reserved commitments), observability/serverless overhead (log ingestion/retention in Azure Log Analytics, AWS CloudWatch, Google Cloud Logging; serverless retries and event fan‑out), licensing/marketplace charges, and governance gaps (untagged resources, idle dev/test).; Insight mitigates these risks with egress‑aware architecture reviews, commitment management, tagging and lifecycle policies, budget alerts, and chargeback frameworks aligned to ISO 27001, Cyber Essentials and NCSC guidance. Changes are validated against performance, security and compliance requirements prior to implementation to avoid service disruption. Typical engagements reduce unmanaged cost growth by 20–30%, improving accountability through transparent reporting and showback/chargeback. Continuous optimisation ensures commitments track actual usage and observability and storage footprints remain controlled, helping buyers maintain predictable budgets, meet governance obligations and reinvest savings into priority services.

  -

  Additional sources of cost reduction

  Insight enables UK public sector organisations to achieve predictable, sustainable cloud cost reductions across Microsoft Azure, AWS and Google Cloud. As an Azure Expert MSP, AWS Premier Consulting Partner and Google Cloud Premier Partner, we apply proven methodologies aligned with recognised standards such as ISO 27001, Cyber Essentials and NCSC guidance.; Sources of cost reduction include:; ; Reserved Instance and Savings Plan optimisation to maximise discounts.; Rightsizing and workload alignment to eliminate overprovisioning.; Automated assessments and governance frameworks to detect inefficiencies early and enforce compliance.; Proprietary dashboards for real-time spend visibility and scheduled reviews for continuous optimisation.; ; Our approach combines automation with expert-led reviews, ensuring savings without service disruption or security compromise. Typical engagements deliver 20–30% cost reductions across multi-cloud environments. For example, Insight helped a UK government agency cut Azure costs by 28%, reinvesting savings into public-facing digital services.; Risk mitigation is central to our process: optimisation changes are validated against performance and compliance requirements before implementation. Buyers benefit from transparent reporting, predictable budgets and reinvestment opportunities, all delivered through a structured, repeatable methodology tailored to public sector needs.

  ---

  Private Cloud - Formula for calculating price of your services

  ---

  Total Cost

  The Total Cost for a buyer's call off requirement in a Private Cloud Deployment

  =

  Baseline Pricing

  G-Cloud Digital Marketplace

  -

  Minimum Discounting

  0%

  +

  Onboarding Activity

  Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process

  +

  Additional sources of cost

  Unmanaged cloud activity can increase costs and risk for public sector buyers. Key drivers include data movement (inter‑region/zone egress, CDN origin fetches, Azure ExpressRoute metered egress, AWS NAT Gateway, Google Cloud Interconnect/NAT), storage and backup (snapshot sprawl, cold‑tier retrieval, Azure Archive rehydration, AWS Glacier tier fees, Google Coldline early deletion), compute/database inefficiencies (oversized instances, unattached disks/IPs, mis‑tuned autoscaling, misaligned reserved commitments), observability/serverless overhead (log ingestion/retention in Azure Log Analytics, AWS CloudWatch, Google Cloud Logging; serverless retries and event fan‑out), licensing/marketplace charges, and governance gaps (untagged resources, idle dev/test).; Insight mitigates these risks with egress‑aware architecture reviews, commitment management, tagging and lifecycle policies, budget alerts, and chargeback frameworks aligned to ISO 27001, Cyber Essentials and NCSC guidance. Changes are validated against performance, security and compliance requirements prior to implementation to avoid service disruption. Typical engagements reduce unmanaged cost growth by 20–30%, improving accountability through transparent reporting and showback/chargeback. Continuous optimisation ensures commitments track actual usage and observability and storage footprints remain controlled, helping buyers maintain predictable budgets, meet governance obligations and reinvest savings into priority services.

  -

  Additional sources of cost reduction

  Insight enables UK public sector organisations to achieve predictable, sustainable cloud cost reductions across Microsoft Azure, AWS and Google Cloud. As an Azure Expert MSP, AWS Premier Consulting Partner and Google Cloud Premier Partner, we apply proven methodologies aligned with recognised standards such as ISO 27001, Cyber Essentials and NCSC guidance.; Sources of cost reduction include:; ; Reserved Instance and Savings Plan optimisation to maximise discounts.; Rightsizing and workload alignment to eliminate overprovisioning.; Automated assessments and governance frameworks to detect inefficiencies early and enforce compliance.; Proprietary dashboards for real-time spend visibility and scheduled reviews for continuous optimisation.; ; Our approach combines automation with expert-led reviews, ensuring savings without service disruption or security compromise. Typical engagements deliver 20–30% cost reductions across multi-cloud environments. For example, Insight helped a UK government agency cut Azure costs by 28%, reinvesting savings into public-facing digital services.; Risk mitigation is central to our process: optimisation changes are validated against performance and compliance requirements before implementation. Buyers benefit from transparent reporting, predictable budgets and reinvestment opportunities, all delivered through a structured, repeatable methodology tailored to public sector needs.

  ---

• Total Cost: The Total Cost for a buyer's call off requirement in a Public Cloud Deployment
• Baseline Pricing: G-Cloud Digital Marketplace
• Baseline Pricing - Web link: https://www.gov.uk/digital-marketplace
• Minimum Discounting: 0%
• Onboarding Activity: Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process
• Additional sources of cost: Unmanaged cloud activity can increase costs and risk for public sector buyers. Key drivers include data movement (inter‑region/zone egress, CDN origin fetches, Azure ExpressRoute metered egress, AWS NAT Gateway, Google Cloud Interconnect/NAT), storage and backup (snapshot sprawl, cold‑tier retrieval, Azure Archive rehydration, AWS Glacier tier fees, Google Coldline early deletion), compute/database inefficiencies (oversized instances, unattached disks/IPs, mis‑tuned autoscaling, misaligned reserved commitments), observability/serverless overhead (log ingestion/retention in Azure Log Analytics, AWS CloudWatch, Google Cloud Logging; serverless retries and event fan‑out), licensing/marketplace charges, and governance gaps (untagged resources, idle dev/test).; Insight mitigates these risks with egress‑aware architecture reviews, commitment management, tagging and lifecycle policies, budget alerts, and chargeback frameworks aligned to ISO 27001, Cyber Essentials and NCSC guidance. Changes are validated against performance, security and compliance requirements prior to implementation to avoid service disruption. Typical engagements reduce unmanaged cost growth by 20–30%, improving accountability through transparent reporting and showback/chargeback. Continuous optimisation ensures commitments track actual usage and observability and storage footprints remain controlled, helping buyers maintain predictable budgets, meet governance obligations and reinvest savings into priority services.
• Additional sources of cost reduction: Insight enables UK public sector organisations to achieve predictable, sustainable cloud cost reductions across Microsoft Azure, AWS and Google Cloud. As an Azure Expert MSP, AWS Premier Consulting Partner and Google Cloud Premier Partner, we apply proven methodologies aligned with recognised standards such as ISO 27001, Cyber Essentials and NCSC guidance.; Sources of cost reduction include:; ; Reserved Instance and Savings Plan optimisation to maximise discounts.; Rightsizing and workload alignment to eliminate overprovisioning.; Automated assessments and governance frameworks to detect inefficiencies early and enforce compliance.; Proprietary dashboards for real-time spend visibility and scheduled reviews for continuous optimisation.; ; Our approach combines automation with expert-led reviews, ensuring savings without service disruption or security compromise. Typical engagements deliver 20–30% cost reductions across multi-cloud environments. For example, Insight helped a UK government agency cut Azure costs by 28%, reinvesting savings into public-facing digital services.; Risk mitigation is central to our process: optimisation changes are validated against performance and compliance requirements before implementation. Buyers benefit from transparent reporting, predictable budgets and reinvestment opportunities, all delivered through a structured, repeatable methodology tailored to public sector needs.
• Total Cost: The Total Cost for a buyer's call off requirement in a Private Cloud Deployment
• Baseline Pricing: G-Cloud Digital Marketplace
• Minimum Discounting: 0%
• Onboarding Activity: Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process
• Additional sources of cost: Unmanaged cloud activity can increase costs and risk for public sector buyers. Key drivers include data movement (inter‑region/zone egress, CDN origin fetches, Azure ExpressRoute metered egress, AWS NAT Gateway, Google Cloud Interconnect/NAT), storage and backup (snapshot sprawl, cold‑tier retrieval, Azure Archive rehydration, AWS Glacier tier fees, Google Coldline early deletion), compute/database inefficiencies (oversized instances, unattached disks/IPs, mis‑tuned autoscaling, misaligned reserved commitments), observability/serverless overhead (log ingestion/retention in Azure Log Analytics, AWS CloudWatch, Google Cloud Logging; serverless retries and event fan‑out), licensing/marketplace charges, and governance gaps (untagged resources, idle dev/test).; Insight mitigates these risks with egress‑aware architecture reviews, commitment management, tagging and lifecycle policies, budget alerts, and chargeback frameworks aligned to ISO 27001, Cyber Essentials and NCSC guidance. Changes are validated against performance, security and compliance requirements prior to implementation to avoid service disruption. Typical engagements reduce unmanaged cost growth by 20–30%, improving accountability through transparent reporting and showback/chargeback. Continuous optimisation ensures commitments track actual usage and observability and storage footprints remain controlled, helping buyers maintain predictable budgets, meet governance obligations and reinvest savings into priority services.
• Additional sources of cost reduction: Insight enables UK public sector organisations to achieve predictable, sustainable cloud cost reductions across Microsoft Azure, AWS and Google Cloud. As an Azure Expert MSP, AWS Premier Consulting Partner and Google Cloud Premier Partner, we apply proven methodologies aligned with recognised standards such as ISO 27001, Cyber Essentials and NCSC guidance.; Sources of cost reduction include:; ; Reserved Instance and Savings Plan optimisation to maximise discounts.; Rightsizing and workload alignment to eliminate overprovisioning.; Automated assessments and governance frameworks to detect inefficiencies early and enforce compliance.; Proprietary dashboards for real-time spend visibility and scheduled reviews for continuous optimisation.; ; Our approach combines automation with expert-led reviews, ensuring savings without service disruption or security compromise. Typical engagements deliver 20–30% cost reductions across multi-cloud environments. For example, Insight helped a UK government agency cut Azure costs by 28%, reinvesting savings into public-facing digital services.; Risk mitigation is central to our process: optimisation changes are validated against performance and compliance requirements before implementation. Buyers benefit from transparent reporting, predictable budgets and reinvestment opportunities, all delivered through a structured, repeatable methodology tailored to public sector needs.

Mandatory certifications

• Mandatory certifications:

  Are you are bidding to offer IaaS and/or PaaS as a reseller or are you in sole control of the infrastructure

  Reseller

  Cloud service suppliers you intend to resell with evidence

  Organisation 1

  Organisation name

  AWS

  Website address/upload for organisation

  Website address

  Website address

  https://partners.amazonaws.com/partners/001E000000UfalBIAR/Insight%20Enterprises

  Organisation 2

  Organisation name

  Microsoft

  Website address/upload for organisation

  Website address

  Website address

  https://marketplace.microsoft.com/en-us/partners/8bc78177-662b-440b-ae00-bbc5bf193536/overview

  Organisation 3

  Organisation name

  Google

  Website address/upload for organisation

  Website address

  Website address

  https://cloud.google.com/find-a-partner/partner/insight-direct-uk-ltd

  Organisation 4

  Organisation name

  Salesforce

  Website address/upload for organisation

  Upload

  Upload

  Provided

  ISO 9001 certification

  Provided

  ISO 27001 certification

  Provided

  ISO 20000-1 certification

  Provided

  Are you reliant on the Cloud Service Provider for some accreditations

  Yes

Cyber Essentials

• Do you have a Cyber Essentials Plus certificate?: Yes
• Cyber Essentials Plus certificate Number: Cd8b1a78-44c7-4bb0-84d6-59a7506f3bba

Non-mandatory Standards and certifications

• ISO 28000:2022 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Ensuring new workers are informed of their right to join a trade union
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at pstenderteam@insight.com. Tell them what format you need. It will help if you say what assistive technology you use.