WARP Technologies Ltd.

Microsoft Cloud Azure Hosting Services

Microsoft Azure is a cloud computing service for testing, deploying and managing applications and services. Warp provide Microsoft Azure hosting via Microsoft's Infrastructure as a Service (IaaS) offering. This includes the set-up and provision of a customer tenant and associated Cloud Solution Provider (CSP) arrangement for billing/invoicing.

Features

• Infrastructure as a Service (IaaS) with Microsoft Azure
• Offers essential compute, storage, and networking resources on demand
• Scale and secure cloud storage for data, apps and workloads
• Connect your cloud and on-premises infrastructure globally and securely
• Protect your workloads and infrastructure with built-in security services
• Simplify, automate and optimise management and compliance of cloud resources
• Empower employees to work virtually anywhere
• Run compute-intensive workloads with maximum performance, scalability, cost-efficiency
• Quickly deploy a highly secure remote desktop experience
• Warp are ISO 9001, ISO 14001, and ISO 27001 accredited

Benefits

• Azure manages the infrastructure, while you purchase, install, configure, manage
• Bypass cost and complexity of buying and managing physical infrastructure
• Flexibility to scale IT resources up and down with demand
• Protect your workloads and networks from cybercrime, implementing security models
• Run apps consistently anywhere across distributed locations
• Build and deploy with multiple tools to meet development needs
• Modernise your IT with an enterprise-grade cloud infrastructure
• Migrate existing apps with confidence
• Monthly licensing subscription provides flexibility over usage and cost
• Pay for what you use subscription model

£10 a virtual machine a month

• Free trial available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at alex.cook@warp.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

572070823732361

Contact

Alex Cook
020 8078 0201
alex.cook@warp.co.uk

Service scope

• Service constraints: No.
• System requirements: Internet Explorer, Edge, Mozilla Firefox, Google Chrome or Apple Safari

User support

• Email or online ticketing support: Yes, at extra cost
• Support response times: Target response times vary according to incident severity: Critical - 1 working hour, Severe - 3 working hours, Disruptive - 4 working hours, Minor - 1 working day. Technical Advice has a response SLA of 5 working days.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: We have a robust ITIL-aligned Service Desk, providing 1st, 2nd and 3rd line support to public and private sector organisations with a documented incident management process as part of our ISO 9001 obligations. We offer a single support model as standard, utilizing our cloud support engineers, with extensible options available (such as phone support over a weekend by request, which will be priced accordingly). Our proactive staff are trained to understand the impact of an issue, seeking to resolve it in the short-term whilst providing a long-term fix in parallel where practical. A clear escalation process is in place for any matter related to a ticket or contractual escalation, and a designated Account Manager will hold a monthly review either remotely or on-site. KPIs are in place to monitor performance against SLAs as well as other key success factors for the support function. It is our policy to ensure our staff have appropriate security clearance.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We provide a combination of online training and user documentation. We can tailor onboarding services in line with client requirements where appropriate.
• Service documentation: Yes
• Documentation formats:
  • ODF
  • PDF
• End-of-contract data extraction: Exit terms and offboarding processes are agreed upon contract signing. We can provide further detail if necessary.
• End-of-contract process: We agree this upon contract signing and determine a range of scenarios. Some of these may incur additional cost, dependent on the size and complexity of the offboarding task.

Using the service

• Web browser interface: Yes
• Using the web interface: The web interface is protected by roles-based access control. Should customers require they can be granted access to manage all elements of the deployment.
• Web interface accessibility standard: WCAG 2.1 AAA
• Web interface accessibility testing: The portal is designed to be compliant with all assistive technologies. Specific tests can be performs upon request.
• API: Yes
• What users can and can't do using the API: All functionality available through the portal is mirrored through the API including roles-based access control.
• API automation tools:
  • Ansible
  • Chef
  • SaltStack
  • Terraform
  • Puppet
• API documentation: Yes
• API documentation formats: HTML
• Command line interface: Yes
• Command line interface compatibility:
  • Linux or Unix
  • Windows
  • MacOS
• Using the command line interface: All functionality available through the portal is mirrored through the command line interface including roles-based access control.

Scaling

• Scaling available: Yes
• Scaling type:
  • Automatic
  • Manual
• Independence of resources: Isolation of customer estate is built into the fabric of the hosting platform to ensure that customers are never affected by load and activities outside of their resource pool. Monitoring is in place across a range of metrics to ensure the platform reacts appropriately to a change in demand. More details available if required.
• Usage notifications: Yes
• Usage reporting: Email

Analytics

• Infrastructure or application metrics: Yes
• Metrics types:
  • CPU
  • Disk
  • HTTP request and response status
  • Memory
  • Network
  • Number of active instances
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: Microsoft

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: In-house destruction process

Backup and recovery

• Backup and recovery: Yes
• What’s backed up:
  • Virtual machines and their configuration
  • Databases and Blob storage
  • All associated data files, such as emails
  • Network topology and resource deployment
• Backup controls: Users have full control over the frequency and restoration of back ups and automation related to them.
• Datacentre setup: Multiple datacentres with disaster recovery
• Scheduling backups: Users schedule backups through a web interface
• Backup recovery: Users can recover backups themselves, for example through a web interface

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: 99.9% at a minimum for all services. Service credits will be awarded for downtime. The amount of credits awarded is specific to the resource type and severity of the outage.
• Approach to resilience: This is available on request.
• Outage reporting: This can be reported via a public dashboard, alerts via Microsoft Outlook, and configurable cloud alerts.

Identity and authentication

• User authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google apps)
  • Username or password
• Access restrictions in management interfaces and support channels: We utilise roles-based access control.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Devices users manage the service through:
  • Dedicated device over multiple services or networks
  • Any device but through a bastion host (a bastion host is a server that provides access to a private network from an external network such as the internet)
  • Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: ISO Quality Services Limited
• ISO/IEC 27001 accreditation date: 31/05/2023
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: We have a robust Information Security Policy as part of our ISO 27001 obligations. This is available on request.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We have robust policies and procedures as part of our ISO 9001 obligations. These documents are available on request.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Following our ISO 9001 frameworks, potential vulnerabilities and improvements around our policies and procedures are reviewed frequently.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Aligning with ISO 9001 and ISO 27001, potential vulnerabilities and improvements around our policies and procedures are reviewed frequently. We utilise A.I-backed environmental monitoring provided by our hosting platform to provide early warnings and monitoring for potential security issues.
• Incident management type: Supplier-defined controls
• Incident management approach: We have pre-defined processes for each ITIL incident type. These are followed by the team to conclusion and tracked through an incident management system, with appropriate escalation to expert teams. Users report incidents by phone or email and receive confirmation with a unique ticket number. Monthly reports are provided to the service owner or service delivery manager. We also offer dedicated monthly service delivery management calls.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Separation between users

• Virtualisation technology used to keep applications and users sharing the same infrastructure apart: Yes
• Who implements virtualisation: Third-party
• Third-party virtualisation provider: Microsoft
• How shared infrastructure is kept separate: We use a range of techniques and technologies, and further information can be provided upon request.

Energy efficiency

• Energy-efficient datacentres: Yes
• Description of energy efficient datacentres: Microsoft built its UK and EU datacentres in accordance with its commitment to the EU Code of Conduct for Green Data Centres.

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Warp’s ISO 14001 certification demonstrates our dedication to eco-friendly practices, and our Silver medal from EcoVadis places us in the top 25% of evaluated companies for environment, labour & human rights, ethics, and sustainable procurement. In 2021, we transitioned to a remote workforce, eliminating our dedicated office space and daily commutes. Our electric vehicle (EV) salary sacrifice scheme encourages transition to electric cars for both work and personal travel purposes, and we promote the use of public transport for client meetings. ; ; Our commitment to reducing carbon emissions is supported by our suppliers, notably Microsoft. We have implemented their energy-saving Windows 11 updates for all employees, and we monitor the carbon consumption of our cloud estate using Microsoft's Sustainability Calculator to aid decarbonisation efforts internally and with our clients. We have developed internal tools to allow non-critical infrastructure to be shut down when it is not required.

  Equal opportunity

  We follow policies protecting our diverse workforce, including menopause, maternity/paternity, adoption, and dependent care, ensuring employee well-being.; ; Warp are a Disability Confident Employer and are committed to inclusive hiring practices. We actively recruit from all areas of the U.K., ensuring a diverse talent pool. Our organization operates based on strong core values that are ingrained in our ways of working. We have a published Equality & Diversity policy that guides our commitment to creating an inclusive workplace.; ; Additionally, we have signed the Armed Forces Covenant, reflecting our support for those who serve and their families.

  Wellbeing

  We prioritize the wellbeing and satisfaction of our employees. We recognize the importance of creating a supportive and inclusive work environment that enables our team members to thrive both personally and professionally. To achieve this, we offer a range of employee-centric benefits and policies. ; ; Our employees’ health and wellbeing are especially important to us. Warp offers all permanent employees a private healthcare scheme which covers medical treatment expenses such as medical investigation and assessments, dental care, optical care, and osteopathic treatments. We provide access to reduced-fee gym memberships to encourage our employees to stay active. Warp have established policies to support our employees through various life events and changes, including maternity, paternity, adoption, parental leave, pregnancy loss, menopause, and long-term sickness. Should an individual wish to, they can have open discussions with colleagues and line managers regarding these life changes, so they feel part of an inclusive work culture. We actively solicit and measure employee happiness on a weekly basis and use this data to affect policy and workflow changes that support our team’s job satisfaction.; ; Warp is a keen supporter of voluntary and charitable work, allowing employees an additional 5 days of leave per annum if they wish to volunteer in the community. By investing in the health and wellbeing of employees, this can lead to a reduction in employee ill-health and absenteeism and increase employee happiness, engagement, and productivity. Some of our staff have used this for environmental-based volunteering, such as beach cleaning, and others sit on boards for charities with various social initiatives.

Pricing

• Price: £10 a virtual machine a month
• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: Pre-agreed credit valid for 30 days

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at alex.cook@warp.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.