Software AG (UK) Limited

Software AG - Cloud Ready Enterprise Architecture and Strategic Portfolio Management and Planning

Recognised as a market leader in both Enterprise Architecture and Strategic Portfolio Management, Alfabet helps organizations plan and execute their digital transformation by providing insights into the strategic impact of business, IT and change portfolios. Alfabet provides entry solutions that support both low maturity and extremely complex organizations.


  • Data driven Enterprise Architecture Management (EAM)
  • Strategic Portfolio Management across strategy, business, IT and project portfolios
  • Real time view of all capabilities, applications, data and technologies
  • Roadmapping and investment planning of the enterprise architecture
  • Project Portfolio Management (PPM) to analyze and prioritize change
  • Business Question-based approach for all portfolios and architecture layers
  • OPEX and CAPEX optimization, IT Finance and contract management
  • Powerful configuration features to fully customize the solution
  • Configurable Reporting and analytics, including embedded analytics for dashboarding
  • Comprehensive integration framework leveraging ETL and REST API


  • Increased visibility and transparency to understand the impact of change
  • Enhanced governance means better data for decision making
  • Strategic achievement and operationalization through functional enterprise architecture
  • Improved business continuity as a result of improved visibility
  • Cost reduction through application rationalization and standardization
  • Optimized investment planning and CAPEX allocation
  • Improve operational effeciency of architecture teams through consistent architecture method
  • Greater organizational agility when responding to changing market conditions
  • Fasttrack Enterprise Architecture initiatives with easy-to-use entry solutions
  • Increase the success of broad-based Digital Transformation programs


£133 a user a month

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at Tell them what format you need. It will help if you say what assistive technology you use.


G-Cloud 13

Service ID

5 4 1 1 5 5 4 7 4 7 2 2 2 1 7


Software AG (UK) Limited James Whybrow
Telephone: 07553 867516

Service scope

Software add-on or extension
Yes, but can also be used as a standalone service
What software services is the service an extension to
Software AG's Hybrid Digital Integration Hub. Alfabet integrates natively with ARIS (for business process and operational excellence) and can interface with webMethods for enhanced API planning. Alfabet can combine the worlds of IT and OT for convergent architecture and thus enhance IoT planning together with Cumulocity.
Cloud deployment model
  • Public cloud
  • Private cloud
  • Hybrid cloud
Service constraints
None - Software AG offers a flexible deployment model that can be suited to the customer requirements. This includes Public, Private or Hybrid cloud deployments using a variety of technologies.
System requirements
  • System requirements not applicable as are managed cloud solutions.
  • For On-Premise deployments, SQL DB and Application Server are required

User support

Email or online ticketing support
Email or online ticketing
Support response times
Response times are defined in the SLA.
User can manage status and priority of support tickets
Phone support
Phone support availability
24 hours, 7 days a week
Web chat support
Onsite support
Yes, at extra cost
Support levels
Enterprise Active Support (EAS): Enterprise Active Support gives you maximum flexibility and speed to market. EAS helps you accelerate your digital journey from product installation, needs analysis, upgrade support, one-on-one “meet the expert” sessions and operations reviews through to expedited, round-the-clock problem resolution services.
Enterprise Premium Support (EPS): You can select an enhanced level of support for time periods of a weekend or up to a year or longer. You can also obtain support for older product versions giving you the flexibility to manage your upgrade cycles as you wish. EPS also offers you: Advance designated engineers, designated engineers, after business-hours support and End-of-Maintenance Extension.
Standard: Phone / Web support during regular business hours, product updates and fixes, Access to Empower and TECHCommunity, 7 technical contacts, defined escalation path.
Support available to third parties

Onboarding and offboarding

Getting started
Software AG's expert sales and presales team are the first point of contact when introducing you to Alfabet. This sets the foundation and provides expert guidance in terms of how to start using and benefiting from Alfabet. In addition to regional teams, the Alfabet Customer Center is a global organization that provides further advisory, solutions and customer success management to both prospects and customers alike.
Software AG Education Services provides classroom based training and coaching & mentioring services for all Software AG products. In addition to formal training approaches, self-paced elearning is available across a number of related topics. In tool help and documentation is also embedded directly into the solution. Software AG Empower is a customer portal where all software and supporting documentation is available to download to customers. TECHCommunity and other forums provide a place where end users can collaborate.
Service documentation
Documentation formats
  • HTML
  • PDF
End-of-contract data extraction
Open standard exporting of Data can be provided at Contract end using tooling capability.
End-of-contract process
Upon expiry of the contract term, Software AG Cloud Operations (CloudOps) will retain the tenant's latest state, including the latest tenant backup for 30 calendar days. CloudOps can provide Cloud customers with a backup of their customer data in the form of the last tenant backup – encrypted file. This tenant backup can be restored in product specific cloud and on-premise installations of Alfabet. Furthermore, end users can at any time make Excel based data backups using the provided data capture templates.

Using the service

Web browser interface
Supported browsers
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
Application to install
Designed for use on mobile devices
Differences between the mobile and desktop service
Alfabet is HTML 5 enabled and therefore accessible on mobile and desktop devices (browser-based). The mobile and destop service is the same as this is accessed through a browser-based interface.
Service interface
User support accessibility
None or don’t know
What users can and can't do using the API
A RESTful API is available for the Alfabet application that provides easy access to the content in the Alfabet database. The API is designed as a web service architecture based on the Representational State Transfer (REST) software architecture type. The API can be used for the following:
- to get information about the structure of the object class model,
- to get information about objects stored in the Alfabet database,
- to create, update and delete objects and relationships in the Alfabet database,
- to archive objects in the Alfabet database,
- to trigger execution of ADIF jobs based on an ADIF scheme stored in the Alfabet database,
- to trigger start of a workflow via the Alfabet Web Application based on a workflow template stored in
the Alfabet database,
- to regenerate user passwords,
- to anonymize user data for selected users,
- to download documents from the Internal Document Selector, upload documents to the Internal
Document Selector and generate a list of documents in the Internal Document Selector,
- to update the meta-model configuration of the Alfabet database with the configuration stored in an
AMM file,
- to check the availability of the Alfabet components.
API documentation
API documentation formats
  • Open API (also known as Swagger)
  • HTML
  • ODF
  • PDF
  • Other
API sandbox or test environment
Customisation available
Description of customisation
Alfabet Enterprise includes a fully configurable back end where the following can be configured / managed:
- Executing Administrative Tasks in Alfabet Expand,
- Configuring Access Permissions for Alfabet,
- Localization and Multi-Language Support for the Alfabet Interface,
- Configuring the Class Model,
- Configuring Custom Editors,
- Configuring Custom Selectors and Search Functionalities,
- Configuring Wizards,
- Configuring Standard Business Functions and Custom Explorers,
- Configuring Object Views,
- Configuring User Profiles for the User Community,
- Configuring Workflows,
- Configuring Alfabet Functionalities Implemented in the Solution Environment,
- Configuring the Visualization of the Alfabet Interface,
- Configuring Reports,
- Defining Queries,
- Publishing Data In Microsoft® Word & PPT Formats,
- Configuring Surveys for Data Capture Campaigns,

Any user with access to the Expand configuration tool is able to make changes mentioned above.


Independence of resources
Software AG CloudOps configures Network Time Protocol (NTP) on all IaaS provider instances, and the systems time is synchronized with a load-balanced pool of public servers on the Internet. These data points from system components and endpoints allow CloudOps to monitor system performance, potential security threats and vulnerabilities, resource utilization, and detection of unusual system activity. The CloudOps team receives alerts when the log data triggers certain performance metrics (such as an instance that is not responding), a capacity warning, or a latency issue. Depending on the alert's severity, the responsible team member will review and make the necessary remediation.


Service usage metrics
Metrics types
This is supported at 2 levels. First, from the Cloud perspective - Software AG CloudOps is responsible for monitoring activity and usage within the boundary of Software AG's cloud environment through the use of audit logs, logging analysis, alerting tools, and data visualization tools. Second, within the Alfabet application, usage metrics and detailed audit logs are used to paint a clear picture of who is using the application and what they are doing in it. Only the latter is reported in real time to administrators or the solution.
Reporting types
  • Real-time dashboards
  • Reports on request


Supplier type
Not a reseller

Staff security

Staff security clearance
Other security clearance
Government security clearance
Up to Security Clearance (SC)

Asset protection

Knowledge of data storage and processing locations
Data storage and processing locations
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
User control over data storage and processing locations
Datacentre security standards
Managed by a third party
Penetration testing frequency
At least every 6 months
Penetration testing approach
Another external penetration testing organisation
Protecting data at rest
Physical access control, complying with another standard
Data sanitisation process
Data sanitisation type
Deleted data can’t be directly accessed
Equipment disposal approach
A third-party destruction service

Data importing and exporting

Data export approach
Exporting of Data can be achieved using open standards for example CSV, Microsoft Excel (.xlsx) and relational databases. Alfabet Databases and Configurations are exportable as .ADB and .AMM files.
Data export formats
  • CSV
  • Other
Other data export formats
  • Microsoft Excel (.xlsx)
  • XML
  • JSON
  • Plain ASCII
Data import formats
  • CSV
  • Other
Other data import formats
  • Microsoft Excel (.xlsx)
  • XML
  • JSON
  • Plain ASCII

Data-in-transit protection

Data protection between buyer and supplier networks
  • Private network or public sector network
  • TLS (version 1.2 or above)
Data protection within supplier network
  • TLS (version 1.2 or above)
  • Legacy SSL and TLS (under version 1.2)

Availability and resilience

Guaranteed availability
As per the standard cloud service contract, availability of the service is 99.5%.
Approach to resilience
99.50% Based on infrastructure provider availability measured over 5 minute intervals per calendar month (excluding standard scheduled maintenance and any agreed customer requested optional maintenance activities).
Outage reporting
Software AG’s Cloud Trust Centre website provides web-based access to
• Live data on our cloud system availability
• Current and historical information on system performance

Identity and authentication

User authentication needed
User authentication
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Username or password
Access restrictions in management interfaces and support channels
Authentication is required and is implemented access cloud accounts and account activities are logged using AWS Cloud Trail services. In addition, The cloud product permits the configuration of a connection to customer's Single Sign On Services through an Identity Federation Capability via SAML2. In addition, the AWS Identity and Access Management (IAM) service provides identity federation to the AWS Management Console. Multi-factor authentication is an optional feature that a customer can utilize. A certification based authentication is not required.
Access restriction testing frequency
At least once a year
Management access authentication
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Username or password

Audit information for users

Access to user activity audit information
Users receive audit information on a regular basis
How long user audit data is stored for
Access to supplier activity audit information
Users receive audit information on a regular basis
How long supplier audit data is stored for
How long system logs are stored for

Standards and certifications

ISO/IEC 27001 certification
Who accredited the ISO/IEC 27001
ISO/IEC 27001 accreditation date
What the ISO/IEC 27001 doesn’t cover
Software AG has certification for compliance with ISO/IEC 27001:2013, ISO/IEC 27017:2015, and ISO/IEC 27018:2019. Software AG Standard and Managed Cloud Services as listed in the certification scope statement delivered by Cloud Operations and PS Managed Services including supporting operation functions.
ISO 28000:2007 certification
CSA STAR certification
PCI certification
Cyber essentials
Cyber essentials plus
Other security certifications
Any other security certifications
  • ISO/IEC 27001:2013, ISO/IEC 27017:2015, ISO/IEC 27018:2019
  • Complies with SOC 2 standards

Security governance

Named board-level person responsible for service security
Security governance certified
Security governance standards
  • CSA CCM version 3.0
  • ISO/IEC 27001
  • Other
Other security governance standards
SOC 2 Type II
Information security policies and processes
ISO/IEC 27001 certified Cloud Information Security Management System (ISMS) including ISO 27017 and ISO 27018 best practices.
Operational control effectiveness attested with SOC 2 Type II Report:
- TSC aligned to 17 Principles from COSO 2013.
- Inclusion of CCM/CSA.
Control transparency with self-assessment based on Cloud Security Alliance (CSA).

Software AG has s dedicated CISO (Chief Information Security Officer) which underscores our focus on cybersecurity in the company, as we continue to promote cyber hygiene and reinforce a security-centric culture in every facet of our business.

Operational security

Configuration and change management standard
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Configuration and change management approach
Components of the service are tracked through the lifetime via standard services which include regular upgrades to latest software versions (following release cycle); seamless patching during maintenance windows to minimize vulnerabilities or bug impact; performance monitoring and service continuity and recovery procedures for high up-time.

Changes are assessed for potential security impact through security testing performed after each release or change to the cloud environment. A standard release process is used to manage the changes and track through to completion.
Vulnerability management type
Supplier-defined controls
Vulnerability management approach
A formal risk management program is used to identify potential new threats, vulnerabilities or exploitation techniques which could affect the service. These are assessed and corrective action is taken. Depending on severity, Critical patches are assessed and installed within 48 hours, Important patches in the next maintenance release and moderate patches in the next general release.

Relevant sources of information relating to threat, vulnerability and exploitation techniques are monitored by the service provider. This includes threat/security awareness systems, vulnerability databases, security bulletins/advisories/RSS feeds.

Service provider timescales for implementing mitigation's are understood and are deemed acceptable.
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
Our auditor’s SOC 2 Type II report certifies the operational effectiveness of our systems that keep your sensitive data secure. This provides a high level of transparency into our controls that mitigate operational and compliance risks. Because it requires an attestation by an independent and objective CPA who bears professional liability for his or her opinion, the SOC 2 is more stringent and credible than other types of reporting on information security controls
Incident management type
Incident management approach
All Cloud Products are covered by Software AG's Standard Support Agreement. Support issues should be raised through Software AG’s customer service portal, Empower, which is available 24x7. Three levels of support are available, with standard support offering 24x7 access to the support portal, 9 to 5 telephone support for standard and critical incidents and 24x7 support service for crisis incidents.

Secure development

Approach to secure software development best practice
Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

Connection to public sector networks

Social Value

Fighting climate change

Fighting climate change

Software AG aims to be a reliable partner delivering high-value, individually customizable software solutions for its customers. The Company supports the digital transformation with its services, even more so since this transformation can help to mitigate or even reverse the consequences of climate change. Software AG wants to actively help people and the planet with its solutions by enabling its customers to create the conditions for doing business sustainably.
We are working to keep our environmental footprint as small as possible. To reduce the impact of our business activities on the planet, we are preparing to become climate neutral as quickly as possible. With the help of our technology and our solutions, we will join forces with our customers and partners to tackle significant environmental challenges and help shape a more sustainable future.
Covid-19 recovery

Covid-19 recovery

The COVID-19 pandemic has been affecting the global economy for two years. Multiple lockdowns in most countries of the world initially had a negative impact on the global economy. Many companies froze, postponed or extended investment activities. Nearly all organizations placed extensive restrictions on business travel. These circumstances make contract negotiations with customers difficult because nearly all meetings can only be conducted online. The absence of customer events and meetings places a burden on generating new project opportunities. Product training for Software AG customers is only possible online, which can result in delayed installation and rollout thereby hindering new business for Software AG. The effects on business operations were minor in 2021. Generally speaking, though, employees of the Software AG Group and of customer organizations have gotten used to working online. The positive effect of this is that the initially feared risk of a pandemic-related decline in business did not manifest. Software AG is generally not affected by disruptions in supply chains thanks to its business model. The pandemic has forced a large share of companies’ and government agencies’ administrative work to be carried out in employees’ homes. The crisis has shed light on the lack of digitalization in business processes, which has had and continues to have an accelerating effect on digitalization. This is resulting in new business opportunities for Software AG, particularly in the Digital Business segment, which could compensate, or even overcompensate, for the negative effects of a global economic recession.
Tackling economic inequality

Tackling economic inequality

Software AG can only succeed over the long term if it acts responsibly and sustainably. As a globally active technology provider, Software AG has drafted a sustainability strategy that it plans to implement in five action areas.
1. Value for Society: Software AG India has launched the SoftwareAGain program. This program focuses on women in India who left the workforce temporarily and would like to re-enter the working world again.
2. Leadership & Governance: Software AG aims to promote education and innovation, support employees’ ongoing growth, steadily improve the standards of products and processes, and thereby remain a reliable long-term partner for customers.
3. Our Employees: People and their unique personalities, experiences and perspectives are at the heart of the Our Employees action area, which aims to foster a corporate culture of respect, transparency and inclusion as well as to attract and retain the best talent.
4. Customers & Technology: Working in an open and creative environment leads to large-scale sharing of experiences and innovative ideas. Customers and Technology requires that approach. Our solutions and services intrinsically drive the digital transformation and help mitigate the impact of climate change.
5. Impact on Environment: We want to minimize our environmental footprint as much as possible. Software AG plans to deploy state-of-the-art technologies and innovations across the Company to achieve this objective.
Equal opportunity

Equal opportunity

Software AG promotes a corporate culture based on diversity, equality and inclusion. Corporate culture plays a decisive role in the implementation of the Helix transformation growth strategy. Since corporate culture, employee satisfaction and engagement are mutually supportive, Software AG has implemented a variety of initiatives to better understand the correlations and to positively impact the Company's culture.
The commitment shown by Software AG's employees paired with their professional and personal skills all contribute decisively to the Company's success. Therefore, ignoring employee concerns poses a fundamental risk of—generally indirect—negative impacts on business performance. Examples of this include situations when low employee satisfaction leads to attrition and a loss of company-specific expertise, or when a lack of diversity in the corporate culture leads to weak innovation. For this reason, Software AG deploys a variety of measures that contribute to high employee satisfaction, and an innovative and diverse corporate culture.


At Software AG, we are passionate about motivating employees to adopt a healthy lifestyle and supporting their mental and physical health. A successful corporate health management program helps improve the health of employees, reduces physical and mental strain from work, prevents disease, and increases employee satisfaction and commitment.
We are committed to fostering our corporate culture grounded in respect, transparency, and inclusion. We continue to focus on attracting and retaining the best talent for Software AG, nurtured through employee engagement and an inclusive and equitable working environment— where all employees can thrive and unleash their full potential.


£133 a user a month
Discount for educational organisations
Free trial available
Description of free trial
A free trial offering full functionality for testing is available for a period of 30 days.
Link to free trial

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at Tell them what format you need. It will help if you say what assistive technology you use.