Open Answers Limited

MuleSoft Anypoint Platform (Public Sector)

MuleSoft's Anypoint Platform is the world's leading integration platform for SOA, SaaS and API's. MuleSoft provides exceptional business agility to companies by connecting applications, data & devices, both on premises and in the cloud with an API led approach. Open Answers is an authorised MuleSoft System Integration/Value-Added Reseller partner.

Features

• Connectivity to over 120 leading SaaS and on-premise applications
• Operational control from a central web-based portal
• High availability; Ensures zero message loss reliability
• Simple to use graphical data mapping and transformation
• API Management and Analytics
• EDI/B2B Integration
• Batch Integration
• Real time integration
• Premium Connectors for SAP, Oracle, Epic, HL7

Benefits

• Re-architect SOA infrastructure from legacy systems to create business agility.
• Hybrid environment, connecting SaaS and on-premise systems seamlessly
• Create a seamless Application Network of apps, data & devices
• Unified connectivity, design, run, analyse on a single platform
• Lowest friction, compose not code with reuseable building blocks
• Future proof; Anypoint's flexibility evolves as your business does
• Quickly design, build & manage the entire API lifecycle
• Promote reuseablity, modularity & collaboration, increasing developer productivity/project speed
• A platform for speed, innovation & growth

£69,200 a unit a year

• Free trial available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ian.bellia@openanswers.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

694217915192140

Contact

Ian Bellia
020 88646999
ian.bellia@openanswers.co.uk

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud
• Service constraints: Globally available with 99.99% uptime SLAs
• System requirements:
  • Mule Runtime minimum: 2GHz CPU or 1 virtual CPU
  • Mule Runtime minimum: 1GB of RAM, 4GB of storage
  • Java: Oracle JDK, JRE 1.8/1.7, IBM JRE 1.8/1.7, OpenJDK 8

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Standard response time is within 1 hour. Weekend support can be added if required.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Gold Support Tier: Hours 8x5; Max Response time 24 hours; 20 support incidents per year. Platinum Support Tier: Hours 24x7; Max Response time 2 hours; unlimited support incidents per year. Titanium Support Tier: Hours 24x7; Max Response time 45 minutes; Costs are described in the Pricing Document. Every MuleSoft subscription customer is allocated a Customer Success Manager (CSM) or Director (CSD) to support them. Additionally, Customer Success Architects (CSA) work across MuleSoft strategic accounts to ensure every customer gets out the most from Anypoint Platform.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Upon procurement of the Anypoint Platform subscription, an Account Executive will contact the customer to arrange onboarding. This will include delivery of a licence key to enable the enterprise features of the Anypoint Platform and onboarding of the chosen support tier from the customer organisation. Onsite and online training is available along with comprehensive online documentation.
• Service documentation: Yes
• Documentation formats: HTML
• End-of-contract data extraction: Any data "at rest" (for example, residing in queues or the object store) must be extracted before the subscription period ends.
• End-of-contract process: When the subscription period ends (if it is not renewed), the Anypoint Platform licence key will expire and the customer will no longer have access to the enterprise features & entitlements in the specified Anypoint Platform or Support.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Anypoint integrates cloud enabled applications for multiple channels including desktop and mobile
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Anypoint Management Center. Administer all aspects of Anypoint Platform on-premises and in the cloud from a single, unified interface. Anypoint API Designer. A graphical syntax-aware environment to design & document APIs in RAML Anypoint Exchange. A unified hub that hosts all MuleSoft connectors, templates, examples and API policies built by the MuleSoft ecosystem or within Anypoint Studio. Use the private tenant of Anypoint Exchange for collaboration and sharing of internal best practices. Anypoint API Portals. Engage app developers with with your API using these easily generated and easy-to-navigate API portals. Share documentation and examples, manage developer access and drive adoption.
• Accessibility standards: None or don’t know
• Description of accessibility: For a detailed assessment of how MuleSoft products support those with accessibility needs, please refer to the VPAT documentation at https://www.mulesoft.com/accessibility
• Accessibility testing: For a detailed assessment of how MuleSoft products support those with accessibility needs, please refer to the VPAT documentation at https://www.mulesoft.com/accessibility
• API: Yes
• What users can and can't do using the API: The CloudHub REST API provides a way for you to programmatically access much of the things you can do through the Anypoint Runtime Manager. It allows you to: Create an application on CloudHub; Change the application properties, including the number of workers and environment variables; Deploy a new version of your application; Delete your application; Get statistics about your application; Create CloudHub notifications; Create e-mail alerts triggered by your applications
• API documentation: Yes
• API documentation formats:
  • HTML
  • Other
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: The CloudHub REST API provides a way for you to programmatically access much of the things you can do through the Anypoint Runtime Manager. It allows you to: Create an application on CloudHub; Change the application properties, including the number of workers and environment variables; Deploy a new version of your application; Delete your application; Get statistics about your application; Create CloudHub notifications; Create e-mail alerts triggered by your applications

Scaling

• Independence of resources: Applications on CloudHub are run by one or more instances of Mule, called workers. These have the following characteristics: Capacity: Each worker has a specific amount of capacity to process data, you can select the size of your workers when configuring an application. Isolation: Each worker runs in a separate container from every other application. Manageability: Each worker is deployed and monitored independently. Locality: Each worker runs in a specific worker cloud, the US, EU, Asia-Pacific, etc

Analytics

• Service usage metrics: Yes
• Metrics types: Metrics types; ; CPU; HTTP request and response status; Memory; Number of active instances
• Reporting types:
  • API access
  • Real-time dashboards

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: MuleSoft, a Salesforce company

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Encryption of all physical media
• Data sanitisation process: No
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Data can be exported in a wide range of industry standard formats as required to suit the business requirement.
• Data export formats:
  • CSV
  • Other
• Data import formats:
  • CSV
  • ODF
  • Other

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: MuleSoft Cloud Offerings have a 99.99% SLA. Percentage credit for monthly fees: 99.95 to 99.5% - 5% credit for monthly fees 99.4 to 98% - 10% credit for monthly fees Less than 98% - 15% credit for monthly fees
• Approach to resilience: Available upon request and under NDA
• Outage reporting: Public status page and email. See http://status.mulesoft.com/

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: The Anypoint platform implements role-based access controls and custom permissions.
• Access restriction testing frequency: At least every 6 months
• Management access authentication: 2-factor authentication

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: Yes
• Who accredited the PCI DSS certification: Available on request.
• PCI DSS accreditation date: 12/12/2019
• What the PCI DSS doesn’t cover: MuleSoft is a level-1 PCI service provider
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications:
  • SSAE 16 SOC 2
  • FIPS 140-2
  • HiTrust

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: SSAE 16
• Information security policies and processes: MuleSoft’s dedicated security team follows industry best practices, runs internal security audits and maintains policies that span operations, data security, passwords and credentials, and secure connectivity. As all our cloud services are built on the AWS platform, we rely on Amazon’s leading physical and network security. MuleSoft also enforces operation controls based on industry standard best practices for public cloud services, including, but not limited to: • Principle of least privileged access • Role based access controls • Data security (not storing sensitive data, encrypting data at rest, and more) • Regular audits • Customer advisories and established escalation processes • Penetration testing

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: MuleSoft uses a secure software development lifecycle (SDLC) methodology and standards. An SDLC document is available upon request and under NDA.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: Available upon request and under NDA.
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: Available upon request and under NDA.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: Available upon request and under NDA.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  Fighting climate change

  Fighting climate change

  As a small company, we're committed to delivering social value by actively fighting climate change. Through our agile solutions implementation and maximizing the use of cloud and hypervisor virtualisation, we have been able to reduce our carbon footprint using newer more efficient and fewer hardware platforms. We've upgraded our facilities with energy-efficient technologies, further reducing our carbon footprint. Additionally, we have provided an Electric car scheme for our employee's and fitted a charging point in our car park to encourage the move from petrol/diesel vehicles, further minimizing our local environmental impact. Together, these efforts showcase our dedication to making a tangible difference in the fight against climate change, one step at a time

Pricing

• Price: £69,200 a unit a year
• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: A 30-day trial version of the MuleSoft Anypoint Platform is available for anyone to sign up to.
• Link to free trial: Www.mulesoft.com

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ian.bellia@openanswers.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.