MongoDB Limited

Realm: Platform

MongoDB Realm is a serverless platform and mobile database. MongoDB Stitch and Realm Database are now part of MongoDB Realm. Short Term Product: Realm Cloud to be used for customers hosted within Realm's Cloud. Minimum 12 month term.Minimum Commitment: 1,000 Devices per Year, only for renewals for Realm self-hosted customers.

Features

• Users & Authentication
• MongoDB Data Access
• Sync
• GraphQL API
• Functions, Triggers & Services
• Static Hosting
• Values & Secrets
• Application Management

Benefits

• Automated
• Flexible
• Scalable
• Highly Available
• High Performance

£8 to £8 a unit

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at michelle.culhane@mongodb.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

835246831568673

Contact

Michelle Culhane
+353 1 901 4654
michelle.culhane@mongodb.com

Service scope

• Software add-on or extension: Yes
• What software services is the service an extension to: MongoDB range of products.
• Cloud deployment model: Public cloud
• Service constraints: No
• System requirements: None

User support

• Email or online ticketing support: Yes, at extra cost
• Support response times: Available 24 x 7 - Depends on Severity Level,
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: Yes, at an extra cost
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: Our Intercom (support web chat) complies with the Web Content Accessibility Guidelines (WCAG) 2.0 Level AA. https://www.intercom.com/blog/messenger-accessibility/
• Web chat accessibility testing: https://www.intercom.com/blog/messenger-accessibility/
• Onsite support: Yes, at extra cost
• Support levels: - Primary Support, Secondary Support and Escalation
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: User Documentation, extra training can be purchased at extra cost
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Because your data is continuously backed up, you can use MongoDB Atlas’s restore capabilities to generate a copy of your database for your own use, including seeding a new environment you manage yourself.
• End-of-contract process: Based on size of your data, once you go over the data size, additional credits can be purchased

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Firefox
  • Chrome
  • Safari
• Application to install: Yes
• Compatible operating systems:
  • Linux or Unix
  • MacOS
  • Windows
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: None
• Service interface: Yes
• User support accessibility: WCAG 2.1 A
• Description of service interface: The Atlas API follows the principles of the REST architectural style to expose a number of internal resources which enable programmatic access to Atlas’s features.
• Accessibility standards: None or don’t know
• Description of accessibility: Accessible through Web page no further details available
• Accessibility testing: Not known
• API: Yes
• What users can and can't do using the API: Set up their account on MongoDB, define their own clusters and how the want to manage this.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: Yes
• Customisation available: No

Scaling

• Independence of resources: MongoDB Atlas grows with you, all with the click of a button. You can scale up across a range of instance sizes, and scale-out with automatic sharding. And you can do it with zero application downtime.

Analytics

• Service usage metrics: Yes
• Metrics types: Storage usage metrics
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Other
• Other data at rest protection approach: Controls are performed as per AWS CONTROLS ETC.
• Data sanitisation process: No
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: You can use MongoDB Atlas’s restore capabilities to generate a copy of your database for your own use, including seeding a new environment you manage yourself.
• Data export formats: Other
• Data import formats: Other

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • Other
• Other protection between networks: MongoDB Atlas provides multiple levels of security for your database. These include robust access control, network isolation using Amazon VPCs and VPC Peering, IP whitelists, encryption of data in-flight using TLS/SSL, and optional encryption of the underlying filesystem.
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: MongoDB Atlas is designed to offer exceptional uptime. Recovery from instance failures is transparent and fully automated. A minimum of three copies of your data are replicated across availability zones and continuously backed up.
• Approach to resilience: Available on request
• Outage reporting: Email alerts, public dashboard and API

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Username or password
• Access restrictions in management interfaces and support channels: Password restricted
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Username or password

Audit information for users

• Access to user activity audit information: No audit information available
• Access to supplier activity audit information: No audit information available
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: Yes
• Who accredited the PCI DSS certification: Via third party provider - STRIPE
• PCI DSS accreditation date: 2015
• What the PCI DSS doesn’t cover: N/a
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: No
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: As per AWS

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: With respect to Change Management, development tasks are defined as issues for specific target releases. A release is deployed to production after it has transitioned through the requisite checkpoints, including testing, staged deployment, and management review. All internal release notes include a QA test plan.
• Vulnerability management type: Undisclosed
• Vulnerability management approach: MongoDB has a vulnerability enumeration and management program; this program identifies company assets, scans for known vulnerabilities, evaluates risk and tracks issue remediation. Vulnerability scans occur at least daily, with results reporting to a centralized security dashboard.
• Protective monitoring type: Undisclosed
• Protective monitoring approach: N/A
• Incident management type: Undisclosed
• Incident management approach: Yes, the company has a defined, documented computer incident/data breach policy.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Social Value

• Fighting climate change:

  Fighting climate change

  At MongoDB, it is our duty to play a role in conserving natural resources and; practicing good environmental stewardship. Simply put, there is no economy; without a healthy planet.; We are committed to doing our part towards global efforts to limit climate; change and its adverse effects, and have set goals in line with our values as a; company.; We have increased our efforts to understand and address our environmental; impact. We created an internal environmental sustainability function, which will; be responsible for our climate objectives. We also started implementing changes; to lower our carbon emissions.; We are working to make sustainability a core component of how we operate and; have begun to intertwine it with our overall business strategy. We believe that; environmentally responsible operating practices will benefit our stockholders,; partners, customers, and employees.; We also hope that through our efforts, we can empower our customers to; achieve their sustainability goals. Sustainability is an important design principle; and an essential part of the software development lifecycle. With this mindset,; we aim to enable our customers to leverage MongoDB Atlas to design and; deploy more environmentally sustainable applications.
• Covid-19 recovery:

  Covid-19 recovery

  n/a
• Tackling economic inequality:

  Tackling economic inequality

  n/a
• Equal opportunity:

  Equal opportunity

  MongoDB is committed to attracting, retaining and developing a diverse workforce.; We are focused on creating an environment where all employees feel like they belong; and can advance and thrive. We believe this approach is in the interest of all our; stakeholders as organizations with higher levels of diversity experience higher rates; of innovation and growth.; We have expanded our efforts to recruit a more diverse workforce by embedding; the capability to recruit diverse talent within our entire recruiting organization and; investing in a diversity sourcing team that supports diverse recruitment marketing; campaigns and external partnerships.; We also have a growing number of Employee Resource Groups (“ERGs”) that focus; on providing community support, professional development and business impact.; Our ERGs play an important role in our overall company culture by helping us raise; awareness of issues unique to their members’ experiences.; As signatories to the Corporate ParityPledge®, we’ve committed to interviewing at; least one qualified female candidate for every open role at the vice president level; and above, as well as for every additional directorship on our Board of Directors .; We are committed to pay equity, regardless of gender, ethnicity, or other personal; characteristics. To deliver on that commitment, we benchmark and set pay ranges; based on market data and consider factors such as an employee’s role and; experience, job location and performance. In addition, to reduce the risk of bias; and help ensure consistent pay practices, we use a third-party tool to conduct; annual pay parity checks.; Our commitment to diversity and inclusion is unwavering. We will continue to set; goals, dedicate resources, evaluate processes, and identify areas of opportunity.; At MongoDB, we want everyone to do their best work and feel comfortable doing it.
• Wellbeing:

  Wellbeing

  We want employees to be fulfilled personally and professionally, so we provide benefits that promote health and support strong performance. Our benefits are structured for a holistic experience and chosen according to our four pillars of well-being:; ; Physical wellbeing; We offer our employees access to comprehensive and competitive medical coverage in local markets, often covering the employee and dependent premiums. Our plans often; include dental, optical, maternity, hospitalization and outpatient care, among other coverages. To promote healthy lifestyles, we also offer employees access to highly subsidized or discounted monthly gym and exercise class memberships.; ; Financial well-being; We believe that financial security is an enabler of creativity and productivity. We offer retirement saving options for our employees, as well as benefits such as life insurance, disability insurance, critical illness, and accident coverage.; ; Family & Community well-being; We provide global fertility benefits to our employees and their partners, including fertility care, adoption and surrogacy assistance, and unlimited access to 1:1 guidance with certified practitioners. We offer backup childcare support in the US and some of our bigger geographies. We feel strongly that parents should be able to share the responsibilities of caregiving, and our parental leave policy gives all new parents at least 20 weeks’ paid leave.; ; Emotional well-being; Our employees and their families have 24-hour access to our Employee Assistance Program (“EAP”). Our EAP offers confidential guidance on matters such as family support, mental health, and legal assistance. Through local partners, employees have access to free counselling and coaching sessions. Globally we also; ; have a team of Mental Health First Aiders (current employee volunteers), who are trained to be a point of contact for any of our employees experiencing emotional distress. In addition, all employees receive a complimentary subscription to a meditation app, which provides hundreds of themed meditation sessions.

Pricing

• Price: £8 to £8 a unit
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at michelle.culhane@mongodb.com. Tell them what format you need. It will help if you say what assistive technology you use.