XTRAVIRT LIMITED

VMware Cloud Foundation on Google Cloud VMware Engine

VMware Cloud Foundation (VCF) is a full-stack private and hybrid cloud platform.
This provides VMware software licences for use with Google Cloud VMware Engine (GCVE). GCVE is a Google-managed service providing VMware-validated cloud infrastructure.

VMware software and Google cloud services are governed by their respective licence, support, and service terms.

Features

VMware Cloud Foundation 9 full-stack private and hybrid cloud platform
Unified lifecycle management across compute, storage, networking, firmware
Declarative infrastructure configuration with drift detection and compliance
Integrated NSX networking and security
Native Kubernetes platform services integrated into SDDC operations
Policy-driven resource management and workload placement
Secure multi-tenant isolation for shared cloud environments
API-first platform supporting infrastructure-as-code automation
Built-in capacity, health, and utilisation visibility
Private AI infrastructure support for secure enterprise AI workloads

Benefits

Consistent private and hybrid cloud operations across all environments
Reduced operational effort through automation and standardised workflows
Faster infrastructure provisioning with repeatable, policy-driven processes
Improved security using integrated networking and access controls
Simplified platform upgrades with full-stack lifecycle management
Supports legacy, modern, containerised, and AI workloads together
Predictable platform performance through proactive monitoring and management
Enables Private AI while maintaining data sovereignty and control
Simplifies cloud exit and workload portability

Service documents

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at accounts@xtravirt.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

Contact

XTRAVIRT LIMITED Chris Willliams
Telephone: 08004880038
Email: accounts@xtravirt.com

About your service

Service categories

IaaS

IaaS Compute

Container and serverless engine compute

Virtualised x86

General purpose
Compute optimised
Memory optimised

Accelerated

GPUs
APUs

Service scope

Service constraints: VMware Cloud Foundation must be deployed on supported GCVE configurations and aligned to VMware and Google reference architectures. Platform behaviour, availability, and resilience depend on GCVE service configuration and customer design choices. Third-party integrations must be compatible with the VMware Cloud Foundation release and GCVE platform in use.
System requirements: VMware Cloud Foundation licence

Google Cloud VMware Engine subscription

Google Cloud account

Supported GCVE region and node configuration

Customer-managed workloads and operating systems
Cloud deployment model: Public cloud

Hybrid cloud

User support

Email or online ticketing support: Yes
Support response times: Support is provided by VMware and Google under their respective support offerings.

VMware provides software support for VMware Cloud Foundation.
Google provides infrastructure support for GCVE.

Support levels, response targets, and coverage are defined by the purchased VMware and Google support tiers. This service does not include a Technical Account Manager or Cloud Support Engineer from the supplier.
User can manage status and priority of support tickets: Yes
Online ticketing support accessibility: None or don’t know
Phone support: Yes
Phone support availability: 24 hours, 7 days a week
Web chat support: No
Onsite support: Yes, at extra cost
Support levels: Support for VMware Cloud Foundation software is provided by Broadcom Global Support Services in line with the support tier purchased.
Support for GCVE infrastructure is provided by Google Cloud Support under the applicable Google Cloud support plan.
Support available to third parties: Yes

Onboarding and offboarding

Getting started: Users start using VMware Cloud Foundation on GCVE through vendor-provided resources. VMware and Google supply product documentation, online guides, and knowledge bases covering platform setup, configuration, and operation. Online training and learning resources are available through VMware and Google training services.

Xtravirt can provide optional onboarding assistance, knowledge transfer, training, and professional services if purchased separately. These services are not included as part of the licence-only offering.
Service documentation: Yes
Documentation formats: HTML

PDF
End-of-contract data extraction: Customer data is hosted on Google Cloud VMware Engine (GCVE) infrastructure within the customer’s Google Cloud environment. All workloads, virtual machines, and associated data continue to reside within the customer’s GCVE project and storage throughout the contract.

When the contract ends, customers can export or migrate data and workloads using VMware- and Google-provided tooling, including GCVE-supported export and migration functions. No supplier-managed data extraction is required. Customers retain full access to their data and environments up to termination.

Data retention, export periods, and tooling options follow GCVE documentation and Google Cloud terms.
End-of-contract process: At the end of the contract, the customer’s right to use VMware Cloud Foundation software licences ends in line with the agreed licence terms. Customer data and workloads remain hosted within the customer’s Google Cloud VMware Engine (GCVE) environment, which continues to operate under Google Cloud terms unless terminated separately by the customer.

The contract price includes the VMware Cloud Foundation software licence and the associated VMware support entitlement for the contract term. It does not include service transition, migration, or operational activities.

Additional costs may apply for licence renewal, expanded support tiers, professional services, training, or assistance with migration or platform transition, if purchased separately.
Documentation accessibility standard: EN 301 549

Using the service

Web browser interface: Yes
Using the web interface: Users access VMware Cloud Foundation through VMware web management interfaces.

Users can:

Access VMware management consoles provided with the licence

Configure and manage platform components within product capabilities

Create, modify, and manage workloads and resources

View system status, alerts, and usage information

Access documentation and support portals

Users cannot:

Bypass VMware licence or product limitations

Perform actions restricted by role-based access controls

Access features not included in the purchased licence edition

Make changes that conflict with VMware product constraints or supported configurations

Initial setup, configuration options, and available functions are defined by the VMware Cloud Foundation product and the licence purchased. All changes made through the web interface are subject to VMware product controls and user permissions.
Web interface accessibility standard: EN 301 549
Web interface accessibility testing: No independent web interface testing with assistive technology users has been carried out by the supplier. Accessibility testing of VMware Cloud Foundation and Google Cloud interfaces is performed by VMware and Google as part of their product accessibility assurance processes.
API: Yes
What users can and can't do using the API: Users use VMware Cloud Foundation and GCVE APIs to automate configuration and operations.

Users can:

Automate supported VMware Cloud Foundation functions using VMware APIs

Provision and manage workloads, networking, and policies within licensed features

Query platform status, events, and usage through supported APIs

Integrate with automation and infrastructure-as-code tools

Users cannot:

Bypass licence limits, RBAC controls, or supported configuration rules

Use APIs to access features not included in the purchased editions

Override GCVE service constraints or Google-controlled infrastructure operations

Perform unsupported lifecycle actions outside documented VMware and Google processes

Initial setup and service enablement are performed through GCVE and VMware-supported workflows. API use is limited to published VMware and Google APIs and subject to customer permissions and platform constraints.
API automation tools: Ansible

Chef

OpenStack

SaltStack

Terraform

Puppet
API documentation: Yes
API documentation formats: Open API (also known as Swagger)

HTML

PDF
Command line interface: Yes
Command line interface compatibility: Linux or Unix

Windows

MacOS
Using the command line interface: Users interact with VMware Cloud Foundation on GCVE using VMware-supported command line tools.

Users can:

Use CLI tools to manage VMware Cloud Foundation features exposed by the platform

Create, modify, and manage workloads and resources

Configure networking, storage, and security settings within licensed capabilities

Automate operational tasks using scripts and supported CLI utilities

Users cannot:

Perform initial GCVE environment provisioning through VMware CLI tools

Access features not included in the purchased VMware licence or GCVE service

Bypass role-based access controls or security restrictions

Apply unsupported configurations or lifecycle actions via the command line

Initial service setup and infrastructure provisioning are governed by GCVE processes. CLI usage is limited to supported VMware and Google tooling and documented platform constraints.

Scaling

Independence of resources: Each customer VMware Cloud Foundation environment runs within its own Google Cloud VMware Engine (GCVE) private cloud. Compute, storage, and networking resources are dedicated to the customer’s GCVE environment and are not shared with other customers. Demand or usage by other organisations does not affect performance or capacity, which are determined by the customer’s selected GCVE configuration and resource allocation.
Usage notifications: Yes
Usage reporting: API

Email
Optimising consumption: Yes
Automatic scaling: Yes

Analytics

Infrastructure or application metrics: Yes
Metrics types: CPU

Disk

Memory

Network

Number of active instances

Other
Other metrics: Platform Health

Events

Performance Logs
Reporting types: API access

Real-time dashboards

Regular reports

Reports on request
Resource tagging: Yes
FOCUS resource tagging: Yes

Resellers

Supplier type: Reseller providing extra features and support
Organisation whose services are being resold: Broadcom (VMware), Omnissa, Veeam, Google, AWS, Dell, HP, Dynatrace, Microsoft

Staff security

Staff security clearance: Conforms to BS7858:2019
Government security clearance: None

Asset protection

Knowledge of data storage and processing locations: Yes
Data storage and processing locations: United Kingdom

European Economic Area (EEA)

Other locations
User control over data storage and processing locations: Yes
Datacentre security standards: Supplier-defined controls
Penetration testing frequency: At least once a year
Penetration testing approach: Another external penetration testing organisation
Protecting data at rest: Physical access control, complying with another standard

Encryption of all physical media

Other
Other data at rest protection approach: Data at rest is protected using VMware Cloud Foundation security features and Google Cloud VMware Engine infrastructure controls. This includes support for encryption, access controls, and secure key management where configured. Physical security of storage media and underlying infrastructure is provided by Google Cloud. Customers control data placement, encryption configuration, and retention within their GCVE environment.
Data sanitisation process: Yes
Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data Erasure

Backup and recovery

What’s backed up: VMware Cloud Foundation management component configuration data

Platform monitoring, logging, and audit configuration data
Backup controls: Platform-level backups cover VMware Cloud Foundation management components and configuration data. These backups are managed as part of the managed service. Workload-level backups, including virtual machines, files, and databases, are controlled by the customer using their chosen backup solution. Customers define backup scope, frequency, retention, and recovery policies for workloads. Xtravirt can advise on supported backup solutions and integration if required.
Datacentre setup: Multiple datacentres with disaster recovery

Multiple datacentres

Single datacentre with multiple copies

Single datacentre
Scheduling backups: Users schedule backups through a web interface
Backup recovery: Users can recover backups themselves, for example through a web interface

Users contact the support team
Backup and recovery: Yes
RPO/RTO: No

Data-in-transit protection

Data protection between buyer and supplier networks: TLS (version 1.2 or above)

IPsec or TLS VPN gateway
Data protection within supplier network: TLS (version 1.2 or above)

IPsec or TLS VPN gateway

Availability and resilience

Guaranteed availability: The availability of Google Cloud VMware Engine (GCVE) is covered by a formal service level agreement (SLA) from Google Cloud VMware Engine. GCVE SLAs specify monthly uptime percentages for private cloud clusters and management interfaces. For example, with appropriate cluster configuration, uptime objectives include:

≥ 99.99 % uptime for clusters with 5–32 nodes and FTT = 2 or more

≥ 99.9 % uptime for clusters with 3–4 nodes and FTT = 1

≥ 99.9 % availability for management interfaces
Google Cloud

If Google does not meet the SLA and the customer meets its obligations, the customer is eligible for financial credits against future bills as defined in the GCVE SLA.
Google Cloud

This service provides software licences only; no separate availability guarantee is provided by the supplier. Availability outcomes for VMware Cloud Foundation software features depend on GCVE infrastructure configuration and customer design.
Approach to resilience: Google Cloud VMware Engine (GCVE) runs on Google Cloud’s global infrastructure, which is designed for resilience through multiple layers of redundancy in power, networking, and hardware. Google Cloud datacentres use redundant systems and geographic separation to minimise the impact of individual failures.

VMware Cloud Foundation software supports clustering, fault tolerance, and workload restart capabilities that contribute to platform resilience when deployed appropriately. Resilience outcomes are dependent on customer configuration choices, such as cluster size, availability zones, and backup/disaster recovery designs.

Detailed resilience architecture for GCVE deployments is available on request.
Outage reporting: Outage and service status for Google Cloud VMware Engine (GCVE) are reported through Google Cloud status and support channels:

Public dashboard: Google Cloud Service Health Dashboard shows current GCVE service status and incidents.

API: Service health and monitoring information can be accessed via Google Cloud APIs and monitoring tools.

Email alerts: Google Cloud status notifications and alerts can be delivered to customers through configured email alerts or cloud monitoring notifications.

For VMware Cloud Foundation software issues, status and incident information is available through VMware (Broadcom) support channels and portals.

This service provides software licences only; there is no separate supplier-operated outage reporting for the licence offering. Status and notifications are provided through the vendors’ published mechanisms.

Identity and authentication

User authentication needed: Yes
User authentication: Multi-Factor Authentication (MFA)

Identity federation with existing provider (for example Google Apps)

Username or password
Access restrictions in management interfaces and support channels: VMware Cloud Foundation 9 management interfaces use role-based access controls to restrict access to authorised users. Access is authenticated using VMware identity services and permissions are assigned based on platform roles.

Support access is provided through authenticated Broadcom support portals associated with the VMware Cloud Foundation licence. Administrative actions and access events are logged in line with VMware Cloud Foundation security capabilities.
Access restriction testing frequency: At least once a year
Management access authentication: Multi-Factor Authentication (MFA)

Identity federation with existing provider (for example Google Apps)

Username or password
Devices users manage the service through: Dedicated device on a segregated network (providers own provision)

Dedicated device on a government network (for example PSN)

Dedicated device over multiple services or networks

Any device but through a bastion host (a bastion host is a server that provides access to a private network from an external network such as the internet)

Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

Access to user activity audit information: Users have access to real-time audit information
How long user audit data is stored for: User-defined
Access to supplier activity audit information: Users have access to real-time audit information
How long supplier audit data is stored for: User-defined
How long system logs are stored for: User-defined

Security governance

Named board-level person responsible for service security: Yes
Security governance certified: Yes
Security governance standards: ISO/IEC 27001
Information security policies and processes: Google Cloud VMware Engine infrastructure is hosted on Google Cloud Platform, which is secured using Google’s defence-in-depth approach as described in the Google Cloud Security Overview. This includes encryption of data in transit and at rest, identity and access controls, continuous monitoring, and independent third-party audits. Google Cloud maintains ISO/IEC 27001 and other recognised security certifications. Customers remain responsible for security configuration within their own environments.

Operational security

Configuration and change management standard: Supplier-defined controls
Configuration and change management approach: Google Cloud VMware Engine infrastructure runs on Google Cloud’s secure global infrastructure, which is designed with controls to support secure service operation and change awareness throughout lifecycle events. This includes monitoring, logging, and security tooling that can detect unexpected changes and assist with compliance activities.
Google Cloud Documentation

Changes to Google Cloud services and underlying infrastructure are governed by Google’s internal release and change management processes, which include risk and impact assessments prior to deployment.

Customers are responsible for configuration and change control within their own GCVE environments using their change management processes and tooling.
Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
Vulnerability management approach: Vulnerability management for this service is supported by Google Cloud VMware Engine (GCVE) and VMware Cloud Foundation security processes.

Potential threats are identified through internal vendor security reviews, automated scanning, and integration with cloud security tooling available on Google Cloud and VMware platforms. Threat intelligence comes from Google Cloud and VMware security research, industry feeds, and responsible disclosure programmes.

Patches and mitigations for VMware Cloud Foundation are released by VMware; patches for GCVE infrastructure are released by Google. Customers choose when and how to apply updates within their own environments.
Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
Protective monitoring approach: Protective monitoring for this service is provided by VMware and Google Cloud. Google Cloud VMware Engine infrastructure is monitored using Google Cloud security monitoring and logging controls aligned to recognised industry standards. VMware Cloud Foundation includes logging and monitoring capabilities to support detection of security events. Customers are responsible for monitoring within their own environments.
Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
Incident management approach: VMware and Google Cloud operate documented incident management processes for their respective services.

Pre-defined procedures exist for common operational and security incidents. Users report incidents through the VMware (Broadcom) support portal for VMware Cloud Foundation software issues and through Google Cloud support channels for Google Cloud VMware Engine infrastructure issues.

Incident updates, progress, and resolution information are provided through the relevant support case systems. Where applicable, post-incident information is shared in line with VMware and Google support and contractual terms. Customers remain responsible for incident management within their own environments.
Post-quantum cryptography secure: No

Secure development

Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Separation between users

Virtualisation technology used to keep applications and users sharing the same infrastructure apart: Yes
Who implements virtualisation: Supplier
Virtualisation technologies used: VMware
How shared infrastructure is kept separate: Different organisations are kept apart through isolation provided by Google Cloud VMware Engine and VMware Cloud Foundation.

Each customer is provisioned a dedicated GCVE private cloud with isolated compute, storage, and networking resources. VMware virtualisation enforces separation at the hypervisor level, while NSX provides logical network segmentation and traffic isolation. Management access is restricted using role-based access controls. Other organisations cannot access or affect a customer’s environment.

Energy efficiency

Energy-efficient datacentres: No

Pricing

Discount for educational organisations: No
Free trial available: No

Discount

Provide your minimum discount applicable to your baseline prices: 0.01%

Formula for calculating price of your services

Which of the core deployment models you intend to offer

Private Cloud

Private Cloud - Formula for calculating price of your services

Total Cost: The Total Cost for a buyer's call off requirement in a Private Cloud Deployment
=
Baseline Pricing: See GCloud Service offerings
-
Minimum Discounting: 0.01%
+
Onboarding Activity: Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process
+
Additional sources of cost: - Customer specific architecture and design
- buyer specific / custom deployment requirements
- Additional licenses for dependent surround services
- integration to existing buyer services
- buyer specific networking, security, identity needs
- allocation of buyer technical specialists to support implementation
-
Additional sources of cost reduction: - use of standardised services
- accelerated deployment timelines
- retirement of existing services

Mandatory certifications

Are you are bidding to offer IaaS and/or PaaS as a reseller or are you in sole control of the infrastructure

Reseller

Cloud service suppliers you intend to resell with evidence

Organisation 1

Organisation name

Broadcom / VMware