BLUESTONEX CONSULTING LIMITED

SAP Business Technology Platform via Partner Managed Cloud by Bluestonex

Bluestonex's PMC provision of SAP BTP services is ideal for organisations who need additional support and expertise in adoption of SAP's Business Technology Platform. We provision, activate, monitor and provide support services for BTP services required for your business. That may be integration, applications or analytics.

Features

• Create business applications using SAP Build
• Create mobile applications for teams on the move
• Warehouse Management Applications
• Datasphere
• SAP Analytics Cloud, analytics
• Rapid, no code application development
• Process Automation and automated workflows
• Gen AI Hub
• Integration for third party software or IOT

Benefits

• Reduced TCO - Lower total cost of ownership
• Fast Value - Quicker time to value realisation
• Managed - Monitored consumption
• Scalability - Easy Scalable Service Offering
• Gen AI - Access to the latest SAP Technology
• Application Accelerators - Access to Blueskyx App Accelerator Suite
• No CapEx - Eliminates initial capital outlay
• Customisation - Bespoke development following an SAP Clean Core methodology
• Access to Expertise - Certified BTP Experts across all pillars
• Cost Predicability - fixed cost for better budgeting

£5,000 a unit a year

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at richard.henry@bluestonex.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

562896099016928

Contact

Richard Henry
+44 7714775537
richard.henry@bluestonex.com

Service scope

• Service constraints: Maintenance Windows for all BTP Services are set within the Service Level Agreement for SAP Cloud Services
• System requirements:
  • WindowsServer 2016 x64 or greater
  • Windows Desktop/Client 10 x86, Windows Desktop/Client 10 x64, or Greater
  • Google Chrome 94 and greater
  • Microsoft Edge 94 and greater,
  • Or Mozilla Firefox 88 and greater

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Our SLAs for enquiries are as follows: Enquiry - response 8 hours
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Severity Response Time (Primary support period) Resolution Time 1 30 Mins 4 hours 2 2 hours 8 hours 3 5 hours 3 Business Day 4 1 Business Day 10 Business Days
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: SAP BTP via PMC by Bluestonex is easy to get started. Bluestonex will set up your subaccount on BTP as well as activate applicable services and user profiles. Commonly there will be a requirement for customers to provide access and setup a cloud connector to core ERP system should there be a requirement to do so. ; ; Beyond the technical setup, Bluestonex offer BTP Strategy support in order to ensure time to value is achieved. This is includes access to application accelerators and BTP expertise to aid your in-house team. In addition, SAP provide BTP missions, which act as hands on training for customers.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: This is provided as a service. If the user raises a ticket in the support portal it will be actioned.
• End-of-contract process: Once the contract terminates, the customer no longer has use of the software but will have their data provided to them

Using the service

• Web browser interface: Yes
• Using the web interface: SAP Business Technology Platform (SAP BTP) is a comprehensive technology platform that enables users to integrate, create, and extend business applications with agility, flexibility, and choice. ; ; What Users Can Do:; ; Integrate Applications: Users can connect SAP and third-party applications to create seamless business processes.; Develop Applications: With low-code application development capabilities, users can build applications quickly and efficiently.; Utilise AI and Analytics: SAP BTP provides AI solutions to predict, manage, and run business operations intelligently.; Automate Processes: Business users can automate tasks and create workflows using low-code solutions.; Access Data Management Services: The platform includes services for database and data management, analytics, and more3.; Innovate with Intelligent Technologies: Users can leverage machine learning and artificial intelligence to enhance applications.; ; What Users Can’t Do:; ; Direct Hardware Access: Users cannot access or manage the underlying cloud infrastructure hardware directly through SAP BTP.; ; Unlimited Free Usage: SAP BTP offers free trials or tiers, but full access to all services typically requires a subscription. BSX will advise on limitations
• Web interface accessibility standard: WCAG 2.1 AAA
• Web interface accessibility testing: SAP conducts thorough testing of its web interfaces, including the SAP Business Technology Platform (SAP BTP), to ensure compatibility with assistive technologies. This involves engaging users who rely on assistive technology to navigate and interact with the web interface. Testing includes user feedback sessions, compatibility testing and scenario-based testing.
• API: Yes
• What users can and can't do using the API: SAP’s APIs facilitate the seamless connection of in-house, cloud-hosted, and external third-party systems with the S/4HANA Cloud platform. Commonly this is done utilising BTP Integration Suite which has limitation depending on subscription
• API automation tools:
  • Terraform
  • Other
• Other API automation tools: SAP Cloud SDK
• API documentation: Yes
• API documentation formats: PDF
• Command line interface: Yes
• Command line interface compatibility:
  • Linux or Unix
  • Windows
  • MacOS
• Using the command line interface: SAP Business Technology Platform (SAP BTP) does offer a command line interface (CLI) known as the btp CLI. It’s an alternative to the cockpit for users who prefer working on the command line. The btp CLI consists of a client that you install on your computer, which interacts with SAP BTP through a server. This CLI allows you to perform various tasks such as creating subaccounts, managing entitlements, handling authorizations, and subscribing to applications. This type of activity would be conducted via BSX as part of the partner managed cloud service.

Scaling

• Scaling available: Yes
• Scaling type: Manual
• Independence of resources: The software is scalable and all micro services can be flexed (e.g increase capacity units / memory / bandwidth)
• Usage notifications: Yes
• Usage reporting:
  • Email
  • Other
• Other usage reporting: As part of PMC, Bluestonex monitors the usage via our own BTP Consumption Monitor. This is accessible by customers but Bluestonex also reports on limits or approaching limits.

Analytics

• Infrastructure or application metrics: Yes
• Metrics types:
  • CPU
  • Disk
  • HTTP request and response status
  • Memory
  • Network
  • Number of active instances
• Reporting types:
  • API access
  • Real-time dashboards
  • Reports on request

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: SAP

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
  • Hardware containing data is completely destroyed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Backup and recovery

• Backup and recovery: Yes
• What’s backed up:
  • Automated Data Backups
  • SAP HANA Cloud
• Backup controls: Backups are automated, this is not controlled by the customer
• Datacentre setup:
  • Multiple datacentres with disaster recovery
  • Multiple datacentres
• Scheduling backups: Supplier controls the whole backup schedule
• Backup recovery: Users contact the support team

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • Bonded fibre optic connections
  • Legacy SSL and TLS (under version 1.2)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Legacy SSL and TLS (under version 1.2)

Availability and resilience

• Guaranteed availability: 99.5% System Availability percentage during each month for production systems
• Approach to resilience: You can access up to date and detailed information about the SAP Data Center at the following website: www.sapdatacenter.com.
• Outage reporting: SAP data centers are equipped with multiple power supply links from various utility providers. In the event of a local power grid failure, these data centers are safeguarded by an uninterruptible power supply system to handle brief disruptions and diesel generators for extended power outages. Consequently, it is highly improbable that power issues will impact the accessibility or integrity of customer data and cloud solutions. Should there be any unexpected downtime, customers will be promptly notified through email.

Identity and authentication

• User authentication:
  • 2-factor authentication
  • Username or password
• Access restrictions in management interfaces and support channels: User roles are assigned which restricts access.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Username or password
• Devices users manage the service through:
  • Dedicated device on a segregated network (providers own provision)
  • Dedicated device on a government network (for example PSN)
  • Dedicated device over multiple services or networks
  • Any device but through a bastion host (a bastion host is a server that provides access to a private network from an external network such as the internet)
  • Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: MSECB
• ISO/IEC 27001 accreditation date: 21/12/2023
• What the ISO/IEC 27001 doesn’t cover: Detailed information is available - https://www.sap.com/about/trust-center/certification-compliance/compliance-finder.html?sort=latest_desc&tag=compliance-offering%3Aoffering-type%2Fiso-27001&pdf-asset=74d39bbe-7a7e-0010-bca6-c68f7e60039b&page=6
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications:
  • ISO 9001
  • ISO 27001
  • ISO 22301
  • ISO 10012
  • ISO 27017

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: https://www.sap.com/uk/about/trust-center/certification-compliance.html

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: All changes typically follow a change authorisation board which clients are involved in. All changed in applications are tracked via GIT repository.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: Vulnerability Management is dedicated to the detection, evaluation, and remediation of prevalent vulnerabilities and configuration anomalies that could pose a threat to the system’s or service’s integrity and security. The Vulnerability Management System encompasses services such as Vulnerability Scanning, External Penetration Testing, and Vulnerability Assessments conducted by customers
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: SAP Cloud Business Applications are overseen around the clock by an automated monitoring system and dedicated operations staff. Security-related incidents are systematically recorded and stored for 180 days within a Security Information and Event Management (SIEM) system. Additionally, CCTV recordings are preserved for a minimum of 90 days, or the maximum duration permitted by local legislation. The monitoring facilities are manned at all times, day and night
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: SAP Cloud has established a structured event reporting system and adheres to a set of escalation protocols in the event of an information security incident. The cloud solutions from SAP are backed by well-documented incident response strategies, which are designed to maintain optimal service quality and availability. Security incidents are diligently overseen and managed by a team of security experts who work in tandem with established customer communication channels until the issue is fully resolved.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Separation between users

• Virtualisation technology used to keep applications and users sharing the same infrastructure apart: Yes
• Who implements virtualisation: Supplier
• Virtualisation technologies used: Other
• Other virtualisation technology used: SAP Specific
• How shared infrastructure is kept separate: SAP Business Technology Platform (SAP BTP) ensures that different organizations sharing the same infrastructure are kept apart through a multi-tenancy model. This model provides each tenant with a secure and isolated environment.; ; This includes Data isolation, Dedicated URLs and Identity & access management

Energy efficiency

• Energy-efficient datacentres: Yes
• Description of energy efficient datacentres: SAP Business Technology Platform (SAP BTP) data centers strive to adhere to various standards and regulations to ensure energy efficiency and sustainability. Customers can select from a variety of data centres which comply with the EU code of conduct for energy efficiency

Social Value

• Social Value:

  Social Value

  • Tackling economic inequality
  • Equal opportunity

  Tackling economic inequality

  At Bluestonex, we believe in the power of giving back to the community that has nurtured us. We understand that our success is intertwined with the well-being of our community, and we are committed to making a positive impact on it. Our commitment to community support is not just a corporate responsibility; it’s a core part of our identity. We actively seek opportunities to contribute to our local community, particularly through the sponsorship of children’s sports. We believe that sports play a crucial role in children’s development, teaching them valuable life skills such as teamwork, discipline, and perseverance. In 2024, our commitment to community support has manifested in the form of sponsoring a junior football team. This sponsorship is not just about providing financial support; it’s about investing in the future of our community. By sponsoring the junior football team, we are helping to provide the children with opportunities to learn, grow, and excel both on and off the field. We are proud to support a sport that brings people together and fosters a sense of community. Football is more than just a game; it’s a platform for instilling values, building character, and creating lasting memories. Through our sponsorship, we hope to inspire the children to pursue their passions, strive for excellence, and believe in their potential.

  Equal opportunity

  At Bluestonex, we are deeply committed to fostering an inclusive and diverse technology industry. We firmly believe that everyone, regardless of their background, should have access to the opportunities that this dynamic field offers. To this end, we have established a partnership with a local school to provide work experience placements for students. These placements are not just about gaining exposure to the tech industry; they are about empowering the next generation of tech leaders. We have designed our work environment to be welcoming and supportive to all students, irrespective of their socio-economic, cultural, or personal backgrounds. We believe that diversity is our strength and that it fuels innovation and creativity. Moreover, we recognize and value neurodiversity. We understand that individuals with neurodiverse challenges bring unique perspectives and strengths that can greatly contribute to our organization and the tech industry as a whole. We strive to create a work environment where neurodiverse individuals can thrive and reach their full potential. In our commitment to inclusivity, we continuously work towards eliminating any barriers that might hinder anyone from pursuing a career in technology. We are dedicated to creating a culture of acceptance and understanding, where everyone feels valued and respected. Through our partnership with the local school, we aim to inspire students and provide them with valuable insights into the tech industry. We hope that this experience will ignite their passion for technology and encourage them to consider a career in this field. In conclusion, at Bluestonex, we are not just building a diverse workforce; we are shaping the future of the technology industry. We are proud to play a part in paving the way for a more inclusive and diverse tech industry. We believe that our efforts today will lead to a more equitable and innovative tech industry of tomorrow.

Pricing

• Price: £5,000 a unit a year
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at richard.henry@bluestonex.com. Tell them what format you need. It will help if you say what assistive technology you use.