Cloud Application Development

Service scope

Software add-on or extension: Yes
What software services is the service an extension to: Microsoft 365 Modules
Cloud deployment model: Public cloud
Service constraints: Subject to Microsoft ongoing maintenance and upgrading Schedule
System requirements: Access to internet

Other requirements are Project Specific

Microsoft 365 Licencing

User support

Email or online ticketing support: Email or online ticketing
Support response times: Our standard response time is within four hours from Monday to Friday. We can also extend this coverage to meet specific client needs through contractual agreements upon request
User can manage status and priority of support tickets: Yes
Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
Phone support: Yes
Phone support availability: 9 to 5 (UK time), 7 days a week
Web chat support: No
Onsite support: Yes, at extra cost
Support levels: Our cloud support engineers are equipped to remotely access client systems to resolve any SharePoint-related issues. Support costs are customized for each client, tailored to their specific IT requirements. We offer a variety of support options, including 24-hour support, onsite assistance, and emergency services.
Support available to third parties: Yes

Onboarding and offboarding

Getting started: At VE3, initiating your project is a streamlined process, tailored to provide a seamless experience due to our extensive project handling expertise. Here's how we ensure your project's success:

Tracking and Delivery: We champion the agile methodology for its significant benefits, though we also have proficiency in Waterfall, Scrum, and Hybrid methodologies. We will discuss and select the most suitable approach with you at the project's commencement.
Discovery and Value Engineering: Our team collaborates closely with members of your organization to identify both essential functional requirements and other crucial factors, including training needs and cultural change initiatives.
Commercial and Contractual: We work with your team to define a clear contractual scope and framework, establishing key delivery milestones to ensure transparency and alignment.

VE3 offers a diverse range of systems and support services that are available both on-site and remotely. We also provide comprehensive training materials tailored to meet your specific needs. Our preferred method is a 'train the trainer' approach, which facilitates knowledge transfer and fosters enthusiasm for change throughout your organization, leveraging a structured and supportive peer-to-peer methodology.
Service documentation: Yes
Documentation formats: HTML

ODF

PDF
End-of-contract data extraction: Data ownership resides with the client, and the protocol for extracting this data at the project's conclusion will be established in agreement with the client at the project's initiation.
End-of-contract process: The project plan, established at the beginning of the project, will detail the responsibilities and expectations of both parties for the project's conclusion

Using the service

Web browser interface: Yes
Supported browsers: Internet Explorer 11

Microsoft Edge

Chrome
Application to install: No
Designed for use on mobile devices: Yes
Differences between the mobile and desktop service: The functionality is very similar between desktop and mobile apps
Service interface: No
User support accessibility: WCAG 2.1 AA or EN 301 549
API: Yes
What users can and can't do using the API: Each API will differ to the requirements of the particular client
API documentation: Yes
API documentation formats: Open API (also known as Swagger)

HTML

PDF
API sandbox or test environment: Yes
Customisation available: Yes
Description of customisation: We can enable customisation with suitable admin personnel at a cost

Scaling

Independence of resources: The Microsoft platform offers extensive capacity, ensuring that our clients do not compete for service usage. The primary factor limiting client experience is typically the speed of their individual internet connections.

Analytics

Service usage metrics: Yes
Metrics types: We will specify all the metrics in the customer documentation at the start of the project
Reporting types: API access

Real-time dashboards

Regular reports

Reports on request

Resellers

Supplier type: Not a reseller

Staff security

Staff security clearance: Conforms to BS7858:2019
Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

Knowledge of data storage and processing locations: Yes
Data storage and processing locations: United Kingdom
User control over data storage and processing locations: Yes
Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency: At least once a year
Penetration testing approach: In-house
Protecting data at rest: Physical access control, complying with CSA CCM v3.0

Physical access control, complying with SSAE-16 / ISAE 3402

Physical access control, complying with another standard
Data sanitisation process: Yes
Data sanitisation type: Deleted data can’t be directly accessed
Equipment disposal approach: A third-party destruction service

Data importing and exporting

Data export approach: The project plan will outline how we can accommodate a range of client requirements, including the integration of various Microsoft products. We will work closely with the client to ensure their needs are met within the scope of our capabilities.
Data export formats: CSV

ODF

Other
Other data export formats: Excel

Word

Teams

Power BI

Microsoft 365
Data import formats: CSV

ODF

Other
Other data import formats: Excel

Teams

Microsoft 365

Sharepoint

Word

Data-in-transit protection

Data protection between buyer and supplier networks: Private network or public sector network

IPsec or TLS VPN gateway

Legacy SSL and TLS (under version 1.2)
Data protection within supplier network: TLS (version 1.2 or above)

IPsec or TLS VPN gateway

Legacy SSL and TLS (under version 1.2)

Availability and resilience

Guaranteed availability: As per Microsoft Data Center / Azure / In-tune licence agreement.
Approach to resilience: As per Microsoft Data Center, resilience spread across at least three data centers.
Outage reporting: As per Microsoft 365 portal

Identity and authentication

User authentication needed: Yes
User authentication: 2-factor authentication

Limited access network (for example PSN)

Username or password
Access restrictions in management interfaces and support channels: VE3 provides stringent user access control to our services, APIs, and specific resources. Controls include restrictions based on time, originating IP address, SSL usage, and MFA device authentication. To execute sensitive API actions like launching or terminating instances, customers must use their Amazon Secret Access Key, which could be from the root VE3 account or a user-specific key via VE3 IAM. API calls cannot proceed without this key. For enhanced security, all API communications can be encrypted using TLS/SSL, ensuring confidentiality, and customers are encouraged to utilize TLS/SSL-protected API endpoints for added safety.
Access restriction testing frequency: At least every 6 months
Management access authentication: 2-factor authentication

Public key authentication (including by TLS client certificate)

Dedicated link (for example VPN)

Username or password

Audit information for users

Access to user activity audit information: Users have access to real-time audit information
How long user audit data is stored for: Between 1 month and 6 months
Access to supplier activity audit information: Users have access to real-time audit information
How long supplier audit data is stored for: Between 6 months and 12 months
How long system logs are stored for: Between 6 months and 12 months

Standards and certifications

ISO/IEC 27001 certification: Yes
Who accredited the ISO/IEC 27001: EGAC
ISO/IEC 27001 accreditation date: 06/01/2024
What the ISO/IEC 27001 doesn’t cover: N/A
ISO 28000:2007 certification: No
CSA STAR certification: No
PCI certification: No
Cyber essentials: Yes
Cyber essentials plus: Yes
Other security certifications: Yes
Any other security certifications: ISO 14000-1

ISO 22301

ISO 9000-1

ISO 20000-1

Security governance

Named board-level person responsible for service security: Yes
Security governance certified: Yes
Security governance standards: ISO/IEC 27001
Information security policies and processes: VE3 has established formal, documented policies and procedures that guide both operations and information security within the organization. These policies clearly define their purpose, scope, the roles involved, responsibilities, and the management's commitment to them. VE3 ensures that these policies are maintained in a centralized and easily accessible location for all employees.

It is VE3’s responsibility to ensure all employees are well-acquainted with the security policies of the organization. Our information security functions are aligned with our organizational structure, which includes clearly defined reporting lines and responsibilities. Leadership plays a pivotal role, providing both clear direction and visible support for ongoing security initiatives. Policies are routinely approved by VE3 leadership at least annually, or whenever significant changes occur within the VE3 environment.

Operational security

Configuration and change management standard: Supplier-defined controls
Configuration and change management approach: At VE3, updates to services and features adhere to secure development practices, including security risk assessments before launch. Developer access to production environments is strictly controlled through a system of explicit requests, requiring owner approval.

Change management standards are customized for each service, based on VE3’s general guidelines. All changes in the production environment must pass through a detailed process including design, documentation, implementation with rollback options, testing in a non-production setting, peer reviews for business and technical impact, and final approval by an authorized party.
Vulnerability management type: Supplier-defined controls
Vulnerability management approach: VE3 Security conducts regular vulnerability scans on host operating systems, web applications, and databases within the VE3 environment. External assessments are carried out by approved third-party vendors at a minimum frequency of quarterly. Any vulnerabilities identified during these scans are carefully monitored and evaluated.

To address these vulnerabilities, VE3 designs and implements countermeasures, ensuring both known and newly discovered vulnerabilities are neutralized effectively.
Protective monitoring type: Supplier-defined controls
Protective monitoring approach: VE3 deploys monitoring devices to detect unauthorized access attempts and usage abuse, tracking metrics like port scans, CPU usage, and unauthorized connections. Near real-time alerts based on predefined thresholds notify our Service/Security Team of potential security breaches.

All interactions with VE3 KMS are logged and visible in the client’s VE3 CloudTrail Amazon S3 bucket, detailing the request type, CMK used, and the protected resource. Clients can access these logs by enabling VE3 CloudTrail in their accounts
Incident management type: Supplier-defined controls
Incident management approach: Manages incidents through a structured three-phased approach:

Activation and Notification Phase: Initiating the incident response and notifying relevant stakeholders.
Recovery Phase: Addressing and mitigating the incident to restore normal operations.
Reconstitution Phase: Analyzing the incident to prevent future occurrences and fully restoring system functionality.
To ensure the effectiveness of our Incident Management plan, VE3 conducts annual incident response tests. These tests are comprehensive, covering various defect discoveries, failure modes, and potential customer impacts. The Incident Response Test Plan is aligned with our Incident Response Plan and includes multiple scenarios, potential attack vectors, collaboration with system integrators for reporting and coordination

Secure development

Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

Connection to public sector networks: No

Social Value

Fighting climate change
Covid-19 recovery
Tackling economic inequality
Equal opportunity
Wellbeing

Fighting climate change

Our G-Cloud service provision is deeply committed to fighting climate change, recognizing the urgent need for collective action to address environmental challenges. Here's how our services deliver against this social value theme:

Environmental Sustainability in Operations:
We prioritize running efficient operations to reduce emissions and minimize environmental impacts. This includes implementing energy-efficient practices, optimizing resource usage, and adopting renewable energy sources wherever possible within our data centers and infrastructure.

Promoting Sustainable Practices:
VE3 actively engages with our suppliers and clients to promote sustainable business practices. Through our services, we advocate for the adoption of environmentally friendly technologies, responsible sourcing, and waste reduction strategies, thereby reducing carbon footprints across the supply chain.

Responsible by Design Framework:
Our G-Cloud services adhere to a 'Responsible by Design' framework, ensuring that environmental considerations are integrated into the development and deployment of digital solutions. By prioritizing environmental protection and minimizing negative impacts, we strive to deliver sustainable outcomes for our clients.

Training and Education:
VE3 invests in training and education programs focused on environmental sustainability. Through initiatives like the Sustainability Quotient (SQ) training, we equip our teams with the knowledge and skills to adopt climate-smart behaviors and implement environmentally conscious practices in their work.

Community Engagement:
We actively engage with communities to support environmental objectives and promote climate action. By partnering with local organizations and stakeholders, we contribute to initiatives aimed at addressing climate change, such as tree planting programs, clean energy projects, and environmental education campaigns.

Covid-19 recovery

Our G-Cloud service provision plays a crucial role in supporting the COVID-19 recovery effort by facilitating resilience, adaptation, and innovation in the face of unprecedented challenges. Here's how our services contribute to the recovery process:

Remote Work Enablement:
VE3's digital solutions empower organizations to transition to remote work seamlessly. By providing secure and reliable cloud-based infrastructure, collaboration tools, and remote access solutions, we enable businesses to maintain productivity while ensuring the safety and well-being of their employees.

Business Continuity Planning:
We assist organizations in developing and implementing robust business continuity plans to mitigate disruptions caused by the pandemic. Our services include data backup and recovery solutions, disaster recovery planning, and resilience testing to ensure operational continuity in the face of unforeseen events.

Digital Transformation Acceleration:
VE3 accelerates digital transformation initiatives to help organizations adapt to the new normal. By modernizing legacy systems, implementing cloud-based technologies, and digitizing processes, we enable businesses to optimize efficiency, improve agility, and remain competitive in a rapidly evolving landscape.

Healthcare Support Solutions:
We provide specialized healthcare support solutions to assist frontline workers and healthcare organizations in responding to the COVID-19 crisis. This includes telemedicine platforms, patient management systems, and data analytics tools to enhance patient care, streamline operations, and support decision-making processes.

Economic Stimulus through Innovation:
VE3 fosters innovation and entrepreneurship to stimulate economic recovery in the aftermath of the pandemic. Through our G-Cloud services, we support startups, small businesses, and enterprises in developing and deploying innovative solutions that address emerging challenges, create new opportunities, and drive economic growth.

Tackling economic inequality

We recognize the importance of tackling economic inequality and are committed to leveraging our G-Cloud service provision to address this pressing social issue. Here's how our services contribute to tackling economic inequality:

Access to Affordable Technology:
We strive to make cutting-edge technology accessible and affordable to all, regardless of economic status. By offering scalable and cost-effective cloud-based solutions, we enable organizations, including small and medium-sized enterprises (SMEs) and underserved communities, to access the tools and resources they need to compete in the digital economy.

Skills Development and Training:
VE3 invests in skills development and training programs to empower individuals with the knowledge and expertise needed to thrive in the digital age. Through initiatives like online courses, certifications, and workshops, we equip people from diverse backgrounds with the skills required for high-demand roles in technology and innovation, thereby enhancing their employability and economic prospects.

Support for Minority-Owned Businesses:
We actively support minority-owned businesses and entrepreneurs by providing access to mentorship, networking opportunities, and resources to help them grow and succeed. Through initiatives like supplier diversity programs and partnerships with minority business organizations, we promote inclusion and diversity in the technology sector and contribute to creating more equitable economic opportunities.

Digital Inclusion Initiatives:
VE3 is committed to promoting digital inclusion and bridging the digital divide by ensuring that everyone has access to essential digital services and technologies. We collaborate with governments, nonprofits, and community organizations to implement initiatives such as digital literacy programs, affordable internet access schemes, and community technology centers, thereby empowering underserved populations and promoting economic equity.

Fair and Transparent Procurement Practices:
We adhere to fair and transparent procurement practices to create opportunities for businesses of all sizes and backgrounds to participate in government contracts and procurement processes.

Equal opportunity

We recognize the importance of tackling economic inequality and are committed to leveraging our G-Cloud service provision to address this pressing social issue. Here's how our services contribute to tackling economic inequality:

Access to Affordable Technology:
We strive to make cutting-edge technology accessible and affordable to all, regardless of economic status. By offering scalable and cost-effective cloud-based solutions, we enable organizations, including small and medium-sized enterprises (SMEs) and underserved communities, to access the tools and resources they need to compete in the digital economy.

Skills Development and Training:
VE3 invests in skills development and training programs to empower individuals with the knowledge and expertise needed to thrive in the digital age. Through initiatives like online courses, certifications, and workshops, we equip people from diverse backgrounds with the skills required for high-demand roles in technology and innovation, thereby enhancing their employability and economic prospects.

Support for Minority-Owned Businesses:
We actively support minority-owned businesses and entrepreneurs by providing access to mentorship, networking opportunities, and resources to help them grow and succeed. Through initiatives like supplier diversity programs and partnerships with minority business organizations, we promote inclusion and diversity in the technology sector and contribute to creating more equitable economic opportunities.

Digital Inclusion Initiatives:
VE3 is committed to promoting digital inclusion and bridging the digital divide by ensuring that everyone has access to essential digital services and technologies. We collaborate with governments, nonprofits, and community organizations to implement initiatives such as digital literacy programs, affordable internet access schemes, and community technology centers, thereby empowering underserved populations and promoting economic equity.

Fair and Transparent Procurement Practices:
We adhere to fair and transparent procurement practices to create opportunities for businesses of all sizes and backgrounds to participate in government contracts and procurement processes.

Wellbeing

Environmental Sustainability:
We are committed to environmental sustainability as a core component of wellbeing. By prioritizing eco-friendly practices, resource conservation, and carbon reduction efforts in our operations and services, we contribute to creating a healthier and more sustainable environment. We prioritize the wellbeing of individuals and communities in all aspects of our G-Cloud service provision. Here's how our services contribute to enhancing wellbeing:

User-Centric Design:
VE3 designs our G-Cloud services with a user-centric approach, prioritizing usability, accessibility, and intuitive design. By focusing on the needs and preferences of users, we create digital experiences that enhance overall wellbeing by reducing frustration, stress, and cognitive load.

Health and Safety Protocols:
We implement robust health and safety protocols to protect the wellbeing of employees, clients, and partners. This includes adherence to strict security standards, data privacy regulations, and compliance with industry best practices to ensure the safety and integrity of our digital infrastructure and services.

Promotion of Work-Life Balance:
VE3 recognizes the importance of work-life balance in maintaining overall wellbeing. Through our G-Cloud services, we enable remote work, flexible scheduling, and collaboration tools that empower individuals to achieve a healthy balance between their professional and personal lives, leading to greater job satisfaction and wellbeing.

Mental Health Support:
We prioritize mental health support for our employees and clients by offering resources, programs, and initiatives aimed at promoting mental wellbeing. This includes access to counseling services, mindfulness training, stress management workshops, and employee assistance programs designed to support individuals in times of need.

Community Engagement and Social Impact:
VE3 actively engages with communities to address social determinants of health and promote holistic wellbeing. Through partnerships, philanthropic initiatives, and volunteer efforts, we support local organizations and projects focused on improving access to healthcare, education, housing, and other essential services that contribute to overall community wellbeing.

Pricing

Price: £175 to £850 a unit
Discount for educational organisations: Yes
Free trial available: No

Features

Benefits

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Public sector networks

Pricing

Service documents

Cookies on Digital Marketplace

Cloud Application Development

Features

Benefits

Pricing

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Public sector networks

Social Value

Pricing

Service documents