INSIGHT DIRECT (UK) LTD

Cloud-Native Database Platform Enablement

Strategic advisory and hands-on enablement for organizations adopting modern PaaS database management to optimize scalability, availability, and operational efficiency.

Features

• Comprehensive cloud database platform assessment and readiness analysis
• Tailored database migration planning and modernization roadmap
• Selection guidance for optimal database service models and engines
• Design and deployment of high-availability architectures
• Automated scaling and performance optimization configuration
• Integrated security best practices and compliance alignment
• Data backup, disaster recovery, and continuity strategy implementation
• Proactive monitoring and incident response integration
• Cost management and optimization recommendations
• Ongoing enablement workshops for client technology teams

Benefits

• Accelerates digital transformation with expert-led cloud adoption guidance
• Improves service uptime through resilient design and built-in high availability
• Reduces operational burden with automated maintenance and scaling
• Optimizes platform performance for evolving business workloads
• Protects sensitive data via integrated, modern security practices
• Minimizes migration risk with structured, phased planning
• Empowers teams to manage future database needs confidently
• Ensures regulatory alignment and improved audit readiness
• Delivers predictable costs and improved ROI for database operations
• Supports business agility and innovation through scalable architecture

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at pstenderteam@insight.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

987448634636980

Contact

Public Sector Tender Team
0344 846 3333
pstenderteam@insight.com

About your service

• Service categories:

  PaaS

  Data Management

  • Databases

Service scope

• Service constraints: Requires existing cloud tenancy and access; scope excludes legacy unsupported databases.
• System requirements: Not applicable
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud

User support

• Email or online ticketing support: No
• Phone support: No
• Web chat support: No
• Onsite support: No
• Support levels: Not applicable
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Our onboarding process is designed to ensure a smooth transition for users starting with our services. We provide comprehensive onsite and online training sessions tailored to meet specific user needs, ensuring that all team members are confident in utilizing our services effectively. Additionally, we offer extensive user documentation in PDF format, which includes step-by-step guides and best practices for leveraging our solutions. ; ; During the onboarding phase, our expert consultants work closely with users to facilitate knowledge transfer and provide hands-on support, ensuring that they are well-equipped to achieve their project goals. We also implement a structured approach to adoption and change management to help users adapt to new workflows seamlessly. ; ; With our agile delivery methodology, we are flexible in accommodating varying user preferences and can modify training sessions as necessary. This comprehensive support framework ensures that users can start using our services efficiently and effectively from day one.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: At the end of the contract, users can extract their data through a structured offboarding process that ensures secure and efficient data handling. Insight will provide a detailed data extraction procedure in compliance with legal and contractual obligations. Users will receive clear instructions on how to retrieve their data, which will be made available in a format that is easy to use and compatible with their systems. ; ; Our professional services team will assist in the data extraction process, ensuring that all data is transferred securely and that proper encryption measures are in place. Data will be provided in a predetermined format as agreed upon during the onboarding phase. Additionally, we will ensure that all access to the data is revoked post-extraction to maintain data security. ; ; We will also conduct a final review meeting with the users to confirm that all data has been successfully extracted and to address any questions or concerns they may have. This process is designed to ensure that users can transition smoothly and retain full control of their data after the contract ends.
• End-of-contract process: At the end of the contract, we ensure a structured offboarding process that is included in the contract price. This includes a final review meeting to discuss project outcomes, a detailed data extraction procedure, and the revocation of access to systems and data. Our professional services team will assist the client in securely transferring their data, providing it in a pre-agreed format. ; ; Any additional costs may arise if the client requests extra data extraction support beyond the standard process or if they require additional training sessions to facilitate the transition. These services will be discussed and agreed upon separately to ensure clarity and alignment with client needs. Our goal is to provide a seamless end-of-contract experience while ensuring all data security and compliance standards are upheld.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Using the web interface: Users can set up the service through the web interface by navigating to the configuration section, where they can select predefined parameters to initiate their environment. They can input necessary details such as resource allocation, security settings, and user permissions. Changes can be made easily through the interface, allowing users to adjust configurations, scale resources, and manage access controls as required. However, limitations exist; users cannot perform actions that require CLI access or make changes outside the predefined options available in the web interface. Additionally, all changes are subject to approval processes embedded in the interface to ensure compliance and security standards are maintained.
• Web interface accessibility standard: WCAG 2.2 AA
• Web interface accessibility testing: We have conducted web interface testing with assistive technology users, ensuring compatibility with screen readers and keyboard navigation. Our testing involved users engaging with the configuration and management sections of the interface using various assistive devices. Feedback was collected to identify usability issues, which were promptly addressed. We continuously work with accessibility experts to enhance user experience for all individuals, including those with disabilities, aligning with WCAG 2.2 Level AA standards. This commitment ensures that our web interface remains user-friendly and accessible for a diverse range of users.
• API: No
• Command line interface: No

Scaling

• Independence of resources: We ensure resource independence through dedicated resource allocation and robust virtualisation technologies, preventing performance degradation during peak usage. Our infrastructure employs auto-scaling features that dynamically adjust resources based on real-time demand, ensuring that user experience remains consistent and unaffected by other users. Additionally, our 24/7 monitoring with XDR allows us to proactively manage workloads and identify potential bottlenecks before they impact service delivery. This combination of technology and monitoring guarantees that all users receive optimal performance at all times.
• Usage notifications: Yes
• Usage reporting: Email
• Optimising consumption: Yes
• Automatic scaling: Yes

Analytics

• Infrastructure or application metrics: No

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: AWS, Azure and Google

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest:
  • Encryption of all physical media
  • Other
• Other data at rest protection approach: We implement additional layers of protection for data at rest through strict access controls, including role-based access and multi-factor authentication for all system access. Data is encrypted using AES-256, ensuring confidentiality, while regular audits and monitoring help detect and respond to unauthorized access attempts. We also maintain comprehensive logs with complete audit trails to facilitate investigations. Backup processes are managed with client-defined specifications, ensuring data integrity and availability. Our commitment to cybersecurity is further supported by our Cyber Essentials Plus certification and adherence to ISO standards.
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase
  • Degaussing
  • Physical Destruction / Hardware containing data is completely destroyed

Backup and recovery

• What’s backed up:
  • Files including documents and images across various systems.
  • Virtual machines containing entire server environments with applications.
  • Databases holding critical data for applications and business processes.
  • Configuration settings for applications and infrastructure components.
  • Application data ensuring continuity for business operations and services.
  • System states allowing restoration to previous operational conditions.
  • User profiles maintaining personal settings and preferences for applications.
  • Logs capturing system activity for compliance and auditing purposes.
  • Snapshots providing point-in-time copies of system resources.
  • Data archives storing long-term records for regulatory compliance needs.
• Backup controls: Users can control backups by defining specific workloads, frequency, and retention periods through a change control process. They can schedule backups for different data types at varying intervals, allowing for tailored backup strategies that meet their organisational needs. This flexibility ensures critical data is backed up according to its importance and recovery requirements, facilitating effective data management and recovery processes.
• Datacentre setup: Multiple datacentres with disaster recovery
• Scheduling backups: Supplier controls the whole backup schedule
• Backup recovery: Users can recover backups themselves, for example through a web interface
• Backup and recovery: Yes
• RPO/RTO: Yes

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • Other
• Other protection between networks: We implement robust security measures to protect data between the buyer's network and our network. This includes the use of TLS 1.2+ encryption to secure data in transit, along with mandatory multi-factor authentication (MFA) for all access. Our infrastructure is monitored 24/7 using Extended Detection and Response (XDR) solutions to detect and respond to potential threats. Additionally, we ensure compliance with Cyber Essentials Plus and conduct annual third-party penetration testing to identify and mitigate vulnerabilities. These measures are complemented by a comprehensive incident response plan, ensuring timely notification of any security incidents within 24-48 hours.
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Other
• Other protection within supplier network: We employ multiple layers of security to protect data within our network. This includes robust firewalls, intrusion detection and prevention systems, and continuous monitoring with Extended Detection and Response (XDR) solutions. Data in transit is secured using TLS 1.2+ encryption, while data at rest is protected with AES-256 encryption. Multi-factor authentication (MFA) is mandatory for all system access, ensuring that only authorized personnel can access sensitive information. Additionally, we conduct annual third-party penetration testing to identify and address vulnerabilities proactively. Our incident response plan guarantees notification of any breaches within 24-48 hours.

Availability and resilience

• Guaranteed availability: Our guaranteed availability is 99.9% for our professional services. This commitment is supported by defined service level agreements (SLAs) that outline our availability metrics and response protocols. In the event that we do not meet the guaranteed levels, users will receive appropriate refunds as stipulated in the SLAs. We ensure continuous monitoring and proactive incident management to uphold these standards, with incident notifications provided within 24-48 hours. Our infrastructure design includes redundancy and failover strategies to mitigate potential disruptions, ensuring that our clients can rely on consistent service availability.
• Approach to resilience: Our service is designed with resilience as a core principle. Our data centre setup incorporates multiple layers of redundancy and failover capabilities to ensure high availability. We employ geographically dispersed data centres, enabling automatic load balancing and disaster recovery in the event of an outage. Our infrastructure utilizes VMware and other leading technologies to provide virtualisation that enhances resource allocation and system performance.; ; We conduct regular testing of backup and recovery procedures to ensure data integrity and quick restoration in case of incidents. Moreover, our 24/7 monitoring services include advanced threat detection and incident response, allowing us to address issues proactively. Detailed incident notification processes are in place to ensure clients are informed within 24-48 hours of any significant events.; ; For specific details regarding our data centre resilience features, we invite you to contact us directly.
• Outage reporting: Our service reports any outages through multiple channels to ensure clients are informed promptly. We provide a public dashboard that displays real-time status updates and historical outage information. Additionally, an API is available for clients who wish to integrate outage notifications directly into their systems. Furthermore, we offer email alerts to notify clients immediately of any service disruptions, ensuring they receive timely information. This multi-faceted approach allows for comprehensive communication regarding service availability, enabling clients to stay informed and make informed decisions during outages.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Other
• Other user authentication: All users must authenticate using Multi-Factor Authentication (MFA) for secure access to our services. This process requires users to provide a combination of something they know (password) and something they have (authentication token or app). Access is restricted to designated devices within the government network, ensuring an additional layer of security. We also maintain comprehensive logs of all authentication attempts, which are retained for auditing purposes. This approach ensures robust user authentication while aligning with our security certifications and compliance standards.
• Access restrictions in management interfaces and support channels: Not applicable
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Other
• Description of management access authentication: All management access to our service is authenticated through Multi-Factor Authentication (MFA), which requires a password and a second form of verification, such as an authentication token or mobile app. This ensures that only authorised personnel can access management functionalities. Additionally, access is limited to dedicated devices within a secure government network, enhancing the security posture. We maintain detailed logs of all management access attempts for auditing and compliance purposes, ensuring transparency and accountability in our access management practices.
• Devices users manage the service through: Dedicated device on a government network (for example PSN)

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: Between 6 months and 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: Cyber Essentials Plus, ISO 9001, ISO 27001, ISO 20000, ISO 14001, PCI-DSS.
• Information security policies and processes: Insight adheres to robust information security policies and processes to safeguard client data and maintain compliance with relevant standards. Our information security management system is based on ISO 27001, ensuring a systematic approach to managing sensitive information. We implement Cyber Essentials Plus, reinforcing our commitment to cyber security.; ; Our reporting structure includes a dedicated Information Security Officer who oversees compliance with security policies. Regular audits and assessments are conducted to ensure adherence to these policies. Any non-compliance is reported promptly to senior management for immediate action.; ; All staff undergo security clearance up to SC level, with ongoing training on security protocols and best practices. We enforce multi-factor authentication for system access and maintain an incident response plan to address potential security breaches within 24-48 hours. Additionally, logs are retained for 6-12 months, providing a complete audit trail to monitor adherence to our policies. This comprehensive approach ensures that our information security policies are effectively implemented and continuously improved.

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Our configuration and change management approach involves tracking all service components throughout their lifecycle using a comprehensive asset management system. Each change is documented, assessed for potential security impact, and classified based on severity. We implement a formal review process for all changes, ensuring that security implications are evaluated in conjunction with operational requirements. This includes impact analysis and stakeholder consultation. Changes are only approved if they meet our security standards, ensuring that any modifications to our infrastructure do not compromise the integrity or security of the services provided.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Our vulnerability management process begins with continuous threat assessment using intelligence from industry sources, threat feeds, and security advisories. We prioritise vulnerabilities based on risk levels and potential impact to our services. Patches are deployed promptly, typically within 24 to 72 hours of a vulnerability being published, depending on severity. Our teams stay updated on potential threats through regular reviews of security bulletins and collaboration with cybersecurity communities. This proactive approach ensures our infrastructure remains secure and resilient against emerging threats.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: We identify potential compromises through continuous 24/7 monitoring with XDR and log analysis, retaining logs for 6-12 months. Upon detecting a potential compromise, we initiate our incident response plan, which includes containment, investigation, and remediation. We aim to notify stakeholders within 24-48 hours of an incident. Our staff are SC cleared, ensuring a secure environment throughout the response.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: Our incident management processes include predefined procedures for common events, ensuring swift and efficient resolution. Users report incidents through our ITSM platform, ServiceNow, which is accessible 24/7. After an incident is resolved, we provide comprehensive incident reports detailing the nature of the incident, response actions taken, and lessons learned. These reports are shared with relevant stakeholders to enhance transparency and inform future prevention strategies. Our approach ensures that incidents are handled in a structured and timely manner, maintaining service integrity and client trust.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Separation between users

• Virtualisation technology used to keep applications and users sharing the same infrastructure apart: Yes
• Who implements virtualisation: Supplier
• Virtualisation technologies used: Other
• Other virtualisation technology used: VMware, Microsoft, AWS, and Google are the virtualisation technologies we utilise to enhance our infrastructure capabilities. These platforms enable us to deliver flexible, secure, and scalable services while maintaining rigorous data separation and compliance standards. Each technology is chosen to optimise performance for specific workloads, ensuring efficiency and reliability across various applications. By leveraging these established platforms, we can provide our clients with robust virtualised environments tailored to meet their unique needs, all while adhering to strict security protocols and best practices in cloud deployment.
• How shared infrastructure is kept separate: Different organisations sharing the same infrastructure are kept apart using robust virtualisation techniques. Each organisation is assigned distinct virtual machines (VMs) within a secure virtual environment, ensuring data isolation and security. Access controls and network segmentation further enhance this separation, preventing unauthorised access between users. Additionally, encryption is employed for data at rest and in transit, safeguarding sensitive information. Regular audits and compliance checks ensure adherence to security standards and maintain the integrity of the shared infrastructure. This multi-tenant architecture provides both scalability and secure resource allocation for all participating organisations.

Energy efficiency

• Energy-efficient datacentres: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount

• Provide your minimum discount applicable to your baseline prices: 0%

Formula for calculating price of your services

• Formula for calculating price of your services:

  Which of the core deployment models you intend to offer

  • Public Cloud
  • Private Cloud

  Public Cloud - Formula for calculating price of your services

  ---

  Total Cost

  The Total Cost for a buyer's call off requirement in a Public Cloud Deployment

  =

  Baseline Pricing

  G-Cloud Digital Marketplace

  Baseline Pricing - Web link

  https://www.gov.uk/digital-marketplace

  -

  Minimum Discounting

  0%

  +

  Onboarding Activity

  Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process

  +

  Additional sources of cost

  Unmanaged cloud activity can increase costs and risk for public sector buyers. Key drivers include data movement (inter‑region/zone egress, CDN origin fetches, Azure ExpressRoute metered egress, AWS NAT Gateway, Google Cloud Interconnect/NAT), storage and backup (snapshot sprawl, cold‑tier retrieval, Azure Archive rehydration, AWS Glacier tier fees, Google Coldline early deletion), compute/database inefficiencies (oversized instances, unattached disks/IPs, mis‑tuned autoscaling, misaligned reserved commitments), observability/serverless overhead (log ingestion/retention in Azure Log Analytics, AWS CloudWatch, Google Cloud Logging; serverless retries and event fan‑out), licensing/marketplace charges, and governance gaps (untagged resources, idle dev/test).; Insight mitigates these risks with egress‑aware architecture reviews, commitment management, tagging and lifecycle policies, budget alerts, and chargeback frameworks aligned to ISO 27001, Cyber Essentials and NCSC guidance. Changes are validated against performance, security and compliance requirements prior to implementation to avoid service disruption. Typical engagements reduce unmanaged cost growth by 20–30%, improving accountability through transparent reporting and showback/chargeback. Continuous optimisation ensures commitments track actual usage and observability and storage footprints remain controlled, helping buyers maintain predictable budgets, meet governance obligations and reinvest savings into priority services.

  -

  Additional sources of cost reduction

  Insight enables UK public sector organisations to achieve predictable, sustainable cloud cost reductions across Microsoft Azure, AWS and Google Cloud. As an Azure Expert MSP, AWS Premier Consulting Partner and Google Cloud Premier Partner, we apply proven methodologies aligned with recognised standards such as ISO 27001, Cyber Essentials and NCSC guidance.; Sources of cost reduction include:; ; Reserved Instance and Savings Plan optimisation to maximise discounts.; Rightsizing and workload alignment to eliminate overprovisioning.; Automated assessments and governance frameworks to detect inefficiencies early and enforce compliance.; Proprietary dashboards for real-time spend visibility and scheduled reviews for continuous optimisation.; ; Our approach combines automation with expert-led reviews, ensuring savings without service disruption or security compromise. Typical engagements deliver 20–30% cost reductions across multi-cloud environments. For example, Insight helped a UK government agency cut Azure costs by 28%, reinvesting savings into public-facing digital services.; Risk mitigation is central to our process: optimisation changes are validated against performance and compliance requirements before implementation. Buyers benefit from transparent reporting, predictable budgets and reinvestment opportunities, all delivered through a structured, repeatable methodology tailored to public sector needs.

  ---

  Private Cloud - Formula for calculating price of your services

  ---

  Total Cost

  The Total Cost for a buyer's call off requirement in a Private Cloud Deployment

  =

  Baseline Pricing

  G-Cloud Digital Marketplace

  -

  Minimum Discounting

  0%

  +

  Onboarding Activity

  Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process

  +

  Additional sources of cost

  Unmanaged cloud activity can increase costs and risk for public sector buyers. Key drivers include data movement (inter‑region/zone egress, CDN origin fetches, Azure ExpressRoute metered egress, AWS NAT Gateway, Google Cloud Interconnect/NAT), storage and backup (snapshot sprawl, cold‑tier retrieval, Azure Archive rehydration, AWS Glacier tier fees, Google Coldline early deletion), compute/database inefficiencies (oversized instances, unattached disks/IPs, mis‑tuned autoscaling, misaligned reserved commitments), observability/serverless overhead (log ingestion/retention in Azure Log Analytics, AWS CloudWatch, Google Cloud Logging; serverless retries and event fan‑out), licensing/marketplace charges, and governance gaps (untagged resources, idle dev/test).; Insight mitigates these risks with egress‑aware architecture reviews, commitment management, tagging and lifecycle policies, budget alerts, and chargeback frameworks aligned to ISO 27001, Cyber Essentials and NCSC guidance. Changes are validated against performance, security and compliance requirements prior to implementation to avoid service disruption. Typical engagements reduce unmanaged cost growth by 20–30%, improving accountability through transparent reporting and showback/chargeback. Continuous optimisation ensures commitments track actual usage and observability and storage footprints remain controlled, helping buyers maintain predictable budgets, meet governance obligations and reinvest savings into priority services.

  -

  Additional sources of cost reduction

  Insight enables UK public sector organisations to achieve predictable, sustainable cloud cost reductions across Microsoft Azure, AWS and Google Cloud. As an Azure Expert MSP, AWS Premier Consulting Partner and Google Cloud Premier Partner, we apply proven methodologies aligned with recognised standards such as ISO 27001, Cyber Essentials and NCSC guidance.; Sources of cost reduction include:; ; Reserved Instance and Savings Plan optimisation to maximise discounts.; Rightsizing and workload alignment to eliminate overprovisioning.; Automated assessments and governance frameworks to detect inefficiencies early and enforce compliance.; Proprietary dashboards for real-time spend visibility and scheduled reviews for continuous optimisation.; ; Our approach combines automation with expert-led reviews, ensuring savings without service disruption or security compromise. Typical engagements deliver 20–30% cost reductions across multi-cloud environments. For example, Insight helped a UK government agency cut Azure costs by 28%, reinvesting savings into public-facing digital services.; Risk mitigation is central to our process: optimisation changes are validated against performance and compliance requirements before implementation. Buyers benefit from transparent reporting, predictable budgets and reinvestment opportunities, all delivered through a structured, repeatable methodology tailored to public sector needs.

  ---

• Total Cost: The Total Cost for a buyer's call off requirement in a Public Cloud Deployment
• Baseline Pricing: G-Cloud Digital Marketplace
• Baseline Pricing - Web link: https://www.gov.uk/digital-marketplace
• Minimum Discounting: 0%
• Onboarding Activity: Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process
• Additional sources of cost: Unmanaged cloud activity can increase costs and risk for public sector buyers. Key drivers include data movement (inter‑region/zone egress, CDN origin fetches, Azure ExpressRoute metered egress, AWS NAT Gateway, Google Cloud Interconnect/NAT), storage and backup (snapshot sprawl, cold‑tier retrieval, Azure Archive rehydration, AWS Glacier tier fees, Google Coldline early deletion), compute/database inefficiencies (oversized instances, unattached disks/IPs, mis‑tuned autoscaling, misaligned reserved commitments), observability/serverless overhead (log ingestion/retention in Azure Log Analytics, AWS CloudWatch, Google Cloud Logging; serverless retries and event fan‑out), licensing/marketplace charges, and governance gaps (untagged resources, idle dev/test).; Insight mitigates these risks with egress‑aware architecture reviews, commitment management, tagging and lifecycle policies, budget alerts, and chargeback frameworks aligned to ISO 27001, Cyber Essentials and NCSC guidance. Changes are validated against performance, security and compliance requirements prior to implementation to avoid service disruption. Typical engagements reduce unmanaged cost growth by 20–30%, improving accountability through transparent reporting and showback/chargeback. Continuous optimisation ensures commitments track actual usage and observability and storage footprints remain controlled, helping buyers maintain predictable budgets, meet governance obligations and reinvest savings into priority services.
• Additional sources of cost reduction: Insight enables UK public sector organisations to achieve predictable, sustainable cloud cost reductions across Microsoft Azure, AWS and Google Cloud. As an Azure Expert MSP, AWS Premier Consulting Partner and Google Cloud Premier Partner, we apply proven methodologies aligned with recognised standards such as ISO 27001, Cyber Essentials and NCSC guidance.; Sources of cost reduction include:; ; Reserved Instance and Savings Plan optimisation to maximise discounts.; Rightsizing and workload alignment to eliminate overprovisioning.; Automated assessments and governance frameworks to detect inefficiencies early and enforce compliance.; Proprietary dashboards for real-time spend visibility and scheduled reviews for continuous optimisation.; ; Our approach combines automation with expert-led reviews, ensuring savings without service disruption or security compromise. Typical engagements deliver 20–30% cost reductions across multi-cloud environments. For example, Insight helped a UK government agency cut Azure costs by 28%, reinvesting savings into public-facing digital services.; Risk mitigation is central to our process: optimisation changes are validated against performance and compliance requirements before implementation. Buyers benefit from transparent reporting, predictable budgets and reinvestment opportunities, all delivered through a structured, repeatable methodology tailored to public sector needs.
• Total Cost: The Total Cost for a buyer's call off requirement in a Private Cloud Deployment
• Baseline Pricing: G-Cloud Digital Marketplace
• Minimum Discounting: 0%
• Onboarding Activity: Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process
• Additional sources of cost: Unmanaged cloud activity can increase costs and risk for public sector buyers. Key drivers include data movement (inter‑region/zone egress, CDN origin fetches, Azure ExpressRoute metered egress, AWS NAT Gateway, Google Cloud Interconnect/NAT), storage and backup (snapshot sprawl, cold‑tier retrieval, Azure Archive rehydration, AWS Glacier tier fees, Google Coldline early deletion), compute/database inefficiencies (oversized instances, unattached disks/IPs, mis‑tuned autoscaling, misaligned reserved commitments), observability/serverless overhead (log ingestion/retention in Azure Log Analytics, AWS CloudWatch, Google Cloud Logging; serverless retries and event fan‑out), licensing/marketplace charges, and governance gaps (untagged resources, idle dev/test).; Insight mitigates these risks with egress‑aware architecture reviews, commitment management, tagging and lifecycle policies, budget alerts, and chargeback frameworks aligned to ISO 27001, Cyber Essentials and NCSC guidance. Changes are validated against performance, security and compliance requirements prior to implementation to avoid service disruption. Typical engagements reduce unmanaged cost growth by 20–30%, improving accountability through transparent reporting and showback/chargeback. Continuous optimisation ensures commitments track actual usage and observability and storage footprints remain controlled, helping buyers maintain predictable budgets, meet governance obligations and reinvest savings into priority services.
• Additional sources of cost reduction: Insight enables UK public sector organisations to achieve predictable, sustainable cloud cost reductions across Microsoft Azure, AWS and Google Cloud. As an Azure Expert MSP, AWS Premier Consulting Partner and Google Cloud Premier Partner, we apply proven methodologies aligned with recognised standards such as ISO 27001, Cyber Essentials and NCSC guidance.; Sources of cost reduction include:; ; Reserved Instance and Savings Plan optimisation to maximise discounts.; Rightsizing and workload alignment to eliminate overprovisioning.; Automated assessments and governance frameworks to detect inefficiencies early and enforce compliance.; Proprietary dashboards for real-time spend visibility and scheduled reviews for continuous optimisation.; ; Our approach combines automation with expert-led reviews, ensuring savings without service disruption or security compromise. Typical engagements deliver 20–30% cost reductions across multi-cloud environments. For example, Insight helped a UK government agency cut Azure costs by 28%, reinvesting savings into public-facing digital services.; Risk mitigation is central to our process: optimisation changes are validated against performance and compliance requirements before implementation. Buyers benefit from transparent reporting, predictable budgets and reinvestment opportunities, all delivered through a structured, repeatable methodology tailored to public sector needs.

Mandatory certifications

• Mandatory certifications:

  Are you are bidding to offer IaaS and/or PaaS as a reseller or are you in sole control of the infrastructure

  Reseller

  Cloud service suppliers you intend to resell with evidence

  Organisation 1

  Organisation name

  AWS

  Website address/upload for organisation

  Website address

  Website address

  https://partners.amazonaws.com/partners/001E000000UfalBIAR/Insight%20Enterprises

  Organisation 2

  Organisation name

  Microsoft

  Website address/upload for organisation

  Website address

  Website address

  https://marketplace.microsoft.com/en-us/partners/8bc78177-662b-440b-ae00-bbc5bf193536/overview

  Organisation 3

  Organisation name

  Google

  Website address/upload for organisation

  Website address

  Website address

  https://cloud.google.com/find-a-partner/partner/insight-direct-uk-ltd

  Organisation 4

  Organisation name

  Salesforce

  Website address/upload for organisation

  Upload

  Upload

  Provided

  ISO 9001 certification

  Provided

  ISO 27001 certification

  Provided

  ISO 20000-1 certification

  Provided

  Are you reliant on the Cloud Service Provider for some accreditations

  Yes

Cyber Essentials

• Do you have a Cyber Essentials Plus certificate?: Yes
• Cyber Essentials Plus certificate Number: Cd8b1a78-44c7-4bb0-84d6-59a7506f3bba

Non-mandatory Standards and certifications

• ISO 28000:2022 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Ensuring new workers are informed of their right to join a trade union
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at pstenderteam@insight.com. Tell them what format you need. It will help if you say what assistive technology you use.