Insight

Insight - Salesforce Heroku

Heroku, a Salesforce company enables developers to focus on application code and data instead of managing servers or operations. Code with agility in open source: Ruby, Node.js, Java, PHP and more. Deploy and scale on demand. Extend apps with 100s of different add-ons. Includes EU Model Contract Clauses. SFDCI2024GC14

Features

• Fully managed container runtime environment
• Scale, dynamically scale up or down instantly to meet demand
• Buildpacks, open source supported and supplied or build your own
• Config, manage specific configurations separately from your source code
• Deploy, with Git. We'll handle compilation, dependencies, assets and executables
• Fork, creates a duplicate instance of your application immediately
• Extend, over 100 add-ons, integrated to Heroku.
• Region, US, Europe and APAC, EU Model Contract Clauses supported
• Data sync into Salesforce Sales, Service, & Marketing Clouds
• Open source, Ruby, Node.js, Python, Java, PHP, Scala or Clojure

Benefits

• Efficient, Developers can focus on the app, not the infrastructure
• Skills, prevalent in the market giving you greater choice
• Community, active to help you learn and share code
• Cost, cheaper than hosting and supporting your own environment
• Agile, create new apps, then deploy on demand
• Platform, API automate/extend with services in a programmatic manner
• Security, Virtual Private Cloud, SSO with OAuth SAML & GDPR
• Flexibility, listed here avoiding lengthy credit-card approvals
• Heroku, Connect pre-built integration to the best of Salesforce
• Speed, scales to millions, exploit the AWS underpin

£25.33 a unit a month

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at pstenderteam@insight.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

650758845128905

Contact

Public Sector Tender Team
0344 846 3333
pstenderteam@insight.com

Service scope

• Service constraints: Usage Limits; Services and content are subject to usage limits, including, for example, the quantities specified in order forms.; A user’s password may not be shared with any other individual.; ; If you exceed a contractual usage limit, we may work with you to seek a reduction in your usage so that it conforms to that limit. If, notwithstanding our efforts, you are unable or unwilling to abide by a contractual usage limit, you will execute an order form for additional quantities of the applicable services or content promptly upon our request.; ; Full details are contained in our terms and conditions.
• System requirements:
  • Heroku Dashboard - web based use any browser
  • Heroku CLI - for Mac OSX, Windows, Debian/Ubuntu and standalone
  • Heroku API - connect programatically

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Guaranteed 30 minute response time on urgent issues. Urgent support available 24x7. Within Business Hours receive deployment consultations, architectural guidance and best practices from Customer Solutions Architects.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: No
• Web chat support: No
• Onsite support: No
• Support levels: Urgent support available 24x7. Within Business Hours receive deployment consultations, architectural guidance and best practices from Customer Solutions Architects.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Customer Solutions Architects proactively assist customers onboard to the service - providing guidance on initial access and setup and continue to provide white glove support on an ongoing basis
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Dependent on the service being consumed. Code should alway exist outside of Heroku and should already be available - if not it can be extracted from applications on Heroku. Data stored in data services can be extracted using standard tools for the service being used. Extraction for add-on services will vary.
• End-of-contract process: Off-boarding from the service will be specific to the nature of the code and service as deployed. The customer therefore always has access to the code, and the data held within the PaaS offering. Typically most customers use the supported databases in conjunction with Heroku, and as such data exports and backups can be taken as required. Code can be saved to GitHub such that off-boarding from Heroku is predictable. Being open source based Heroku can make your data available via an industry standard and easily readable format to make it as easy as possible for you to migrate to another service if you wish to do so.

Using the service

• Web browser interface: Yes
• Using the web interface: The Heroku Dashboard is the web user interface for Heroku’s core features and functionality. It provides UI support for things like creating/renaming/deleting apps, configuring add-ons, managing Heroku Teams, creating Heroku Pipelines, deploying your application, viewing and responding to application metrics, and accessing usage, invoices and billing information.
• Web interface accessibility standard: None or don’t know
• How the web interface is accessible: Heroku Services are developed with accessibility standard awareness - automated testing tools are used to validate errors and changes are made where necessary.
• Web interface accessibility testing: No public information available.
• API: Yes
• What users can and can't do using the API: The platform API empowers developers to automate, extend and combine Heroku with other services. You can use the platform API to programmatically create apps, provision add-ons and perform other tasks that could previously only be accomplished with Heroku toolbelt or dashboard.
• API automation tools:
  • Ansible
  • Chef
  • Terraform
  • Puppet
  • Other
• Other API automation tools:
  • Jenkins
  • Bamboo
  • Codeship
  • Travis
  • Capistrano
  • CircleCI
  • VisualStudio
  • Otto
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
  • Other
• Command line interface: Yes
• Command line interface compatibility:
  • Linux or Unix
  • Windows
  • MacOS
• Using the command line interface: The Heroku Command Line Interface (CLI), formerly known as the Heroku Toolbelt, is a tool for creating and managing Heroku apps from the command line / shell of various operating systems. All capabilities available in the API are available via the CLI.

Scaling

• Scaling available: Yes
• Scaling type: Automatic
• Independence of resources: Heroku provides both single and multi-tenant instances. Single tenant instances are dedicated only for single customer use and isolated from the risk of 'noisy neighbours'. As a platform Heroku serves many billions of requests on a monthly basis.
• Usage notifications: No

Analytics

• Infrastructure or application metrics: Yes
• Metrics types:
  • CPU
  • HTTP request and response status
  • Memory
  • Network
  • Number of active instances
  • Other
• Other metrics: Request Throughput
• Reporting types: Real-time dashboards

Resellers

• Supplier type: Reseller (no extras)
• Organisation whose services are being resold: Salesforce

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest:
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Encryption of all physical media
  • Other
• Other data at rest protection approach: Data is encrypted at rest by using AES-256, block-level storage encryption. Data encryption is implemented using the AWS EBS disk encryption feature. Encryption keys are fully managed by AWS and are not visible to Heroku or Heroku customers. ; ; Heroku automatically encrypts data-at-rest at the disk level for most Heroku plans; however, for customers with advanced encryption needs, there is the BYOK feature for Heroku data add-ons. This feature allows customers to create and manage their own Customer Managed Key (CMK) and the ability to disable the CMK which makes all data encrypted by the key inaccessible.
• Data sanitisation process: Yes
• Data sanitisation type:
  • Deleted data can’t be directly accessed
  • Hardware containing data is completely destroyed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Backup and recovery

• Backup and recovery: Yes
• What’s backed up:
  • Configuration - application configuration and settings
  • Data - data stored in Heroku managed data services
  • Other - backup capabilities of add-ons vary by provider
• Backup controls: Heroku performs automatic backups of the platform, customer application configuration, and Heroku data services attached to applications. Customers can trigger additional backups on a manual or scheduled basis.; ; Every Heroku database on the Standard tier or higher comes with an automatic Continuous Protection mechanism that captures physical backups for disaster recovery. Heroku uses physical backups for continuous protection by persisting incremental snapshots or base backups of the file system, and write ahead log (WAL) files to external, reliable storage. Snapshots are taken on most databases while the database is fully available and makes a verbatim copy of the instance’s disk.
• Datacentre setup: Multiple datacentres with disaster recovery
• Scheduling backups: Users schedule backups through a web interface
• Backup recovery: Users can recover backups themselves, for example through a web interface

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
• Other protection within supplier network: Each application on the Heroku platform runs within its own isolated environment and cannot interact with other applications or areas of the system. This restrictive operating environment is designed to prevent security and stability issues. These self-contained environments isolate processes, memory, and the file system using Linux containers (LXC), while host-based firewalls restrict applications from establishing local network connections.; ; Customer data is stored in separate access-controlled databases per application. Each database requires a unique username and password that is only valid for that specific database and is unique to a single application.

Availability and resilience

• Guaranteed availability: We'll use commercially reasonable efforts to make the online Purchased Services available 24 hours a day, 7 days a week.; ; Applications deployed on the Heroku Services and Customer Data submitted to the Heroku Services, up to the last committed transaction, are automatically replicated on a near real-time basis at the database layer and are backed up as part of the deployment process on secure, access controlled, and redundant storage
• Approach to resilience: The Heroku platform is designed for stability, scaling, and inherently mitigates common issues that lead to outages while maintaining recovery capabilities. The platform maintains redundancy to prevent single points of failure, is able to automatically replace failed components, and utilises multiple data centres designed for resiliency. In the case of an outage, the platform is deployed across multiple data centres using current system images and data is restored from backups. Heroku reviews platform issues to understand the root cause, impact to customers, and improve the platform and processes. In the event of an interruption of Heroku services, details are posted on the status page: https://status.heroku.com/ ; ; The Heroku platform itself is designed to provide highly available and redundant services, so that applications and databases may be replicated quickly in the event of an outage. ; ; Production data centers used to provide the Heroku Services have access system controls in place. These systems permit only authorised personnel to have access to secure areas. These facilities are designed to withstand adverse weather and other reasonably predictable natural conditions, are secured by around-the-clock guards, two-factor access screening, and escort-controlled access, and are also supported by on-site back-up generators in the event of a power failure.
• Outage reporting: Status website, RSS feed and X

Identity and authentication

• User authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google apps)
  • Username or password
  • Other
• Other user authentication: Access to the Heroku Services requires a valid user ID and password combination, which are encrypted via SSL/TLS while in motion and passwords are stored using a one-way salted hash. Alternatively, Heroku supports Single Sign On (SSO) utilizing SAML 2.0 which uses Public Key Encryption and does not require Heroku to store a password. Following a successful authentication, a randomly generated credential is transmitted to the user’s browser or command line interface (CLI). All subsequent requests are authenticated with that credential.
• Access restrictions in management interfaces and support channels: "Management access to services is restricted to specific personnel - fine grained control over which systems they have access to is in-place. Strong security rotation policies are in place and access to maintain the platform is only completed from authorised machines over secure channels. Heroku Support personnel only have access to customer applications if the customer gives them permission to do so. "
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
  • Other
• Description of management access authentication: Access restriction involves utilising the Kerberos security system. Authentication through Kerberos is mandatory for certain roles to perform administrative tasks.; ; There are no login credentials to access customer production data, rather they have separate login credentials to their interface accomplished through a proprietary login credentialing system.
• Devices users manage the service through: Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: Between 1 month and 6 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Certifying body is EY CertifyPoint.
• ISO/IEC 27001 accreditation date: Issue date of certificate: January 25, 2024
• What the ISO/IEC 27001 doesn’t cover: Listing of current exclusions within the ISO27001 Statement of Applicability available to view at https://compliance.salesforce.com/en/documents/a006e000010P47JAAS
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: Yes
• Who accredited the PCI DSS certification: Qualified Security Assessor: Coalfire Systems Inc.
• PCI DSS accreditation date: Date of report: 27th July 2023
• What the PCI DSS doesn’t cover: No exclusions
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications:
  • SOC 1, 2, 3
  • ISO27017
  • ISO27018
  • SOC 2
  • HDS
  • NEN-7510
  • ISMAP
  • APEC Processor Seal

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • CSA CCM version 3.0
  • ISO/IEC 27001
  • Other
• Other security governance standards: ISO 27017; ISO 27018; NEN7510; SOC 1,2, 3; HDS Certificate; PCI DSS; UK Cyber Essentials Plus ; Data Privacy Framework (DPF) Program; HIPAA; CSA STAR
• Information security policies and processes: Salesforce's information security policies are based on the ISO 27002 framework of best practices and are ISO 27001 certified. The EVP of Security has responsibility for the information security policies and ISMS. The Salesforce Security Steering Committee approves/authorizes all changes to the policies, the Statement of Applicability (SoA), the information security manual, and any separate policy statements. During the ISO 27001 audit process (as well as other audits such as SOX and SSAE 16 SOC 1), Senior Management for various departments are involved in verifying that policies and procedures are in place and adhered to. Policies are reviewed/approved at least annually.

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: Changes to Salesforce products in pre-production and production environments and data centers, including changes to applications, information systems, network topologies, configurations, and data center facilities, must be managed by a documented change control process and approved change management system.; ; The Heroku Security team performs change management in line with the Salesforce change management standards which closely align with the ITIL framework. Change Management processes dictate that system changes and maintenance are documented in Salesforce’s internal ticketing system. Changes require approval, security impact and risk analysis and testing prior to deployment.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: The vulnerability management process is designed to remediate risks without customer interaction or impact. Heroku is notified of vulnerabilities through internal and external assessments, system patch monitoring, and third party mailing lists and services. ; ; Each vulnerability is reviewed to determine if it is applicable to Heroku’s environment, then it is categorised according to risk management and assigned to the appropriate team for resolution.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Heroku security and engineering staff monitor various tools and log feeds to detect anomalous behaviour. The teams review authentication events, sudo requests, data traffic patterns, and other data sources. More detail to specific questions available on request.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: Salesforce has a formal Incident Management Process that guides the Salesforce Computer Security Incident Response team in investigation, management, communication, and resolution activities.; ; Salesforce will promptly notify the customer in the event of any security breach of the Service resulting in an actual or reasonably suspected unauthorized disclosure of Customer Data. Notification may include phone contact by Salesforce support, email to customer's administrator and Security Contact and public posting on trust.salesforce.com.; ; Salesforce.com is a member of the prestigious Forum of Incident Response and Security Teams (FIRST) and complies with the FIRST framework and best practices for incident response.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Separation between users

• Virtualisation technology used to keep applications and users sharing the same infrastructure apart: Yes
• Who implements virtualisation: Supplier
• Virtualisation technologies used: Other
• Other virtualisation technology used: Linux containers (LXC)
• How shared infrastructure is kept separate: Each application on the Heroku platform runs within its own isolated environment and cannot interact with other applications or areas of the system. This restrictive operating environment is designed to prevent security and stability issues. These self-contained environments isolate processes, memory, and the file system using Linux containers (LXC), while host-based firewalls restrict applications from establishing local network connections. Infrastructure uses a fully virtualized hardware provided by AWS.

Energy efficiency

• Energy-efficient datacentres: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Salesforce today has net zero emissions and has been voluntarily reporting on its greenhouse gas emissions since fiscal year 2012. Since that time, the company has continued to increase the scope of its climate action strategy by actively engaging policymakers, peers, partners, suppliers, and customers to accelerate toward a collective net zero goal.; ; This fiscal year, we further operationalized our Climate Action Plan by adding sustainability as our fifth company value. That means sustainability plays a crucial role in the decisions we make across the company. We’re holding ourselves accountable through public commitments outlined in our Climate Action Plan and tying executive compensation to performance against that plan.; ; As an early adopter of science-based target-setting through the Science Based Targets Initiative, we’re committed to reducing our scope 1 and market-based scope 2 emissions by 50% and to working with suppliers representing 60% of our applicable scope 3 emissions to set their own science-based targets. The market-based methodology takes into account the renewable energy we purchase as an emissions reduction. Since we achieved 100% renewable energy starting in FY22 by matching all electricity we use globally with electricity purchased from renewable sources, we have surpassed our FY31 scope 1 and 2 (market-based) science based target.; ; At the same time, we know that even deeper absolute emissions reductions are necessary. That’s why we’ve also set a more ambitious climate target: to reduce absolute, location-based emissions (without any compensation like renewables and carbon credit purchases) by 50% by 2030, and 90% by 2040 across our entire supply chain (scope 1, 2, and 3 emissions).; ; While we look for opportunities to directly reduce our own value chain emissions, we also engage in areas like policy, innovation, and philanthropy to support the systemic changes the planet needs.

  Covid-19 recovery

  Businesses are under pressure to find ways to innovate quickly, while providing seamless user experiences and increased security to accommodate the all-digital, work-from-anywhere world.; ; At Salesforce, we have responded to our customers’ needs faster than ever. We launched Work.com in May to help organisations navigate the complexity of safe office return. It included apps for manual contact tracing, employee wellness checks, shift scheduling, employee learning platform and command centre to help leaders visualise the data and make informed decisions. We built an entirely new suite of solutions in just eight weeks." More details: https://www.salesforce.com/news/stories/how-salesforce-built-work-com-in-8-weeks/. We also launched Vaccine Cloud in 2021 to help monitor health in the community.; ; Returning to the office; As the pandemic changed the way we work and live, we used our technology like Work.com and expertise to safely reopen our offices world-wide, and welcome our employees in a safe environment.; The Salesforce's approach is more than just reopening offices, for Brent Hyder (former Salesforce President and CPO) it is ‘’an opportunity to create a workspace and an employee experience that makes us more connected, healthy, innovative and productive.’’; For more information: https://www.salesforce.com/news/stories/global-return-to-the-office-the-salesforce-approach/; ; Vaccine Cloud; Introduced in early 2021, this cloud-based solution is designed to help organisations, workplaces, schools, and non-profits make data-driven decisions based on health status so they can open safely. ; Vaccine Cloud helps businesses and organisations quickly scale vaccine operations. The solution features capabilities ranging from recipient registration and scheduling to inventory management and public health outreach. Salesforce built Vaccine Cloud because legacy systems were built too simplistic to handle this epidemic; Vaccine Cloud is a technology that helps:; • Mitigate short-term risks and stabilise operations; • Plan and orchestrate a return-to-work; • Engage customers, partners, and suppliers at every-point

  Tackling economic inequality

  According to 2021’s IDC Salesforce Economy Study, Salesforce and its global ecosystem of partners will create $1.6 trillion in new business revenues and add 9.3 million new jobs by 2026. Salesforce is committed to not only creating new technology and career opportunities, but paving pathways to these new jobs. At the core of this commitment is Trailhead, Trailblazer Community, and our diverse workforce development programs.; ; Trailhead’s mission is to reduce learning barriers, creating an equal and accessible pathway into the Salesforce ecosystem with free, hands-on access to skills and technology. More than 5 million people are already skilling up with Trailhead, as anyone with an internet connection can simply sign up for a free account at Trailhead.com.; ; With the Trailblazer Community, you have a built-in, global network of Trailblazers who are there to support your growth. A Valoir survey of 700 Trailblazer Community members confirms participation helps with job placement and career growth.; • 60% say fellow Trailblazer Community members have helped them get a new job or promotion ; • 80% say Trailblazer Community engagement has helped them deliver success at their company; ; Workforce development programs include: ; • Pathfinder - Salesforce’s Pathfinder program empowers the next generation of Trailblazers to build their careers in the Salesforce ecosystem with free, immersive technical and business training. Pathfinder is on a mission to skill up new and diverse talent pipelines to create a more equitable workforce. Nearly 1,000 participants have graduated from the program, and many launched their careers with Salesforce customers and partners. ; • Salesforce Talent Alliance - Salesforce Talent Alliance works with Salesforce partners and customers to build a more diverse workforce that reflects the communities where we live and work. Over 1,000 employers globally have joined the Salesforce Talent Alliance.

  Equal opportunity

  As part of our commitment, we announced our role as one of The Valuable 500’s 13 Iconic Leaders, helping to transform businesses with a goal of closing the disability unemployment gap. As part of this designation, we publicly committed to facilitating a global jobs portal — developed by people with disabilities — to ensure greater access to opportunities and more diverse workforces.; ; The Valuable 500 is a global call to action for 500 of the world’s most influential businesses to include disability on their agenda and end bias toward disability in business. Today, The Valuable 500 is the largest community of global corporations committed to this goal.; ; We joined the group in 2019 to create inclusive workplaces where everyone feels valued, respected and comfortable bringing their true self to work. Our participation as an Iconic Leader is only the beginning. There is much work to be done, and we are excited to move forward on this next phase of our journey.; ; Equality is a core value at Salesforce. We believe that businesses can be powerful platforms for social change and that it is our responsibility to further equality for all.; ; We passionately believe in equality for all and are committed to protecting our employees and customers from discrimination. We ensure that diversity, inclusion, accessibility, and sustainability are built into our product design and company operations. Salesforce strongly supports laws and policies that protect and promote equal rights, and we oppose policies that could create, or lead to, a discriminatory environment. ; ; We’ve been deeply focused on re-imagining our hiring systems with equality at the centre. We saw significant change thanks to new initiatives like: our diversity recruiting team, a more equitable referral process, and the Insiders program, which connects candidates to employees from their community.

  Wellbeing

  At Salesforce, we invest in the health and wellbeing of our employees, helping them feel happy and engaged in work and in life.; ; Camp B-Well, our holistic wellbeing program, brings together innovative and trusted health and wellbeing offerings with an added dose of fun. Combining traditional benefits with educational wellbeing content, Camp B-Well supports employees and their families around six pillars of wellbeing: nourish, revive, move, thrive, prosper, and connect.; ; Since the beginning, Salesforce has aspired to be a different kind of company. Our founders created the 1-1-1 model, which commits 1% of our equity, technology, and employees’ time to build a more equitable and sustainable world.; ; In FY23, Salesforce reached over half a billion dollars in all-time philanthropic giving – a total of $614 million in grants since its founding. Equity is the foundation of everything we do. Our grantees focus on initiatives that help build a more inclusive and prosperous society. ; ; We strive for all our employees to be citizen philanthropists. Our volunteering and giving programs enable our employees to become high-impact citizen philanthropists who empower the workforce of tomorrow, harness professional skills for good, and strengthen their communities. Impact is at the center of giving back, and for us, impact means creating positive change in the world by building sustainable relationships with community partners and providing needs-based support.; ; Salesforce is a Pledge 1% founder, member, and champion. Following the 1-1-1 model that Salesforce pioneered, Pledge 1% encourages companies to dedicate any combination of 1% of time, product, equity, and/or profit to improving the world. Pledge 1% provides an easy, flexible framework for companies to address the world’s most pressing issues and help their local communities thrive.

Pricing

• Price: £25.33 a unit a month
• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: Customers can sign-up and use Heroku for free - lightweight 'free' dynos are available and most add-on services offer a free-tier to support testing of the service and capabilities.
• Link to free trial: https://www.heroku.com/free

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at pstenderteam@insight.com. Tell them what format you need. It will help if you say what assistive technology you use.