Open Answers Limited

MuleSoft Anypoint Platform (Public Sector)

MuleSoft's Anypoint Platform is the world's leading integration platform for SOA, SaaS and API's. MuleSoft provides exceptional business agility to companies by connecting applications, data & devices, both on premises and in the cloud with an API led approach.
Open Answers is an authorised MuleSoft System Integration/Value-Added Reseller partner.


  • Connectivity to over 120 leading SaaS and on-premise applications
  • Operational control from a central web-based portal
  • High availability; Ensures zero message loss reliability
  • Simple to use graphical data mapping and transformation
  • API Management and Analytics
  • EDI/B2B Integration
  • Batch Integration
  • Real time integration
  • Premium Connectors for SAP, Oracle, Epic, HL7


  • Re-architect SOA infrastructure from legacy systems to create business agility.
  • Hybrid environment, connecting SaaS and on-premise systems seamlessly
  • Create a seamless Application Network of apps, data & devices
  • Unified connectivity, design, run, analyse on a single platform
  • Lowest friction, compose not code with reuseable building blocks
  • Future proof; Anypoint's flexibility evolves as your business does
  • Quickly design, build & manage the entire API lifecycle
  • Promote reuseablity, modularity & collaboration, increasing developer productivity/project speed
  • A platform for speed, innovation & growth


£54000 per unit per year

Service documents

G-Cloud 9


Open Answers Limited

Ian Bellia

020 88646999

Service scope

Service scope
Service constraints Globally available with 99.99% uptime SLAs
System requirements
  • Mule Runtime minimum: 2GHz CPU or 1 virtual CPU
  • Mule Runtime minimum: 1GB of RAM, 4GB of storage
  • Java: Oracle JDK, JRE 1.8/1.7, IBM JRE 1.8/1.7, OpenJDK 8

User support

User support
Email or online ticketing support Email or online ticketing
Support response times Platinum support max response time: 2 hours
Gold support max response time: 24 hours
User can manage status and priority of support tickets Yes
Online ticketing support accessibility None or don’t know
Phone support Yes
Phone support availability 24 hours, 7 days a week
Web chat support No
Onsite support Yes, at extra cost
Support levels Gold Support Tier: Hours 8x5; Max Response time 24 hours; 20 support incidents per year.
Platinum Support Tier: Hours 24x7; Max Response time 2 hours; unlimited support incidents per year. Costs are described in the Pricing Document.
Every MuleSoft subscription customer is allocated a Customer Success Manager (CSM) or Director (CSD) to support them. Additionally, Customer Success Architects (CSA) work across MuleSoft strategic accounts to ensure every customer gets out the most from Anypoint Platform.
Support available to third parties Yes

Onboarding and offboarding

Onboarding and offboarding
Getting started Upon procurement of the Anypoint Platform subscription, an Account Executive will contact the customer to arrange onboarding. This will include delivery of a licence key to enable the enterprise features of the Anypoint Platform and onboarding of the chosen support tier from the customer organisation.

Onsite and online training is available along with comprehensive online documentation.
Service documentation Yes
Documentation formats HTML
End-of-contract data extraction Any data "at rest" (for example, residing in queues or the object store) must be extracted before the subscription period ends.
End-of-contract process When the subscription period ends (if it is not renewed), the Anypoint Platform licence key will expire and the customer will no longer have access to the enterprise features & entitlements in the specified Anypoint Platform or Support.

Using the service

Using the service
Web browser interface Yes
Using the web interface Anypoint Management Center – Administer all aspects of Anypoint Platform on-premises and in the cloud from a single, unified interface.
Anypoint API Designer - A graphical syntax-aware environment to design & document APIs in RAML
Anypoint Exchange – A unified hub that hosts all MuleSoft connectors, templates, examples and API policies built by the MuleSoft ecosystem or within Anypoint Studio. Use the private tenant of Anypoint Exchange for collaboration and sharing of internal best practices.
Anypoint API Portals – Engage app developers with with your API using these easily generated and easy-to-navigate API portals. Share documentation and examples, manage developer access and drive adoption.
Web interface accessibility standard None or don’t know
How the web interface is accessible For a detailed assessment of how MuleSoft products support those with accessibility needs, please refer to the VPAT documentation at
Web interface accessibility testing For a detailed assessment of how MuleSoft products support those with accessibility needs, please refer to the VPAT documentation at
What users can and can't do using the API The CloudHub REST API provides a way for you to programmatically access much of the things you can do through the Anypoint Runtime Manager. It allows you to: Create an application on CloudHub;
Change the application properties, including the number of workers and environment variables;
Deploy a new version of your application;
Delete your application;
Get statistics about your application;
Create CloudHub notifications;
Create e-mail alerts triggered by your applications
API automation tools
  • Ansible
  • Chef
  • Puppet
API documentation Yes
API documentation formats
  • HTML
  • Other
Command line interface Yes
Command line interface compatibility
  • Linux or Unix
  • Windows
  • MacOS
Using the command line interface Anypoint Platform a command line tool to interact with:Applications on CloudHub; VPCs; Cloudhub load balancers; API Manager.


Scaling available Yes
Scaling type Manual
Independence of resources Applications on CloudHub are run by one or more instances of Mule, called workers. These have the following characteristics:

Capacity: Each worker has a specific amount of capacity to process data, you can select the size of your workers when configuring an application.

Isolation: Each worker runs in a separate container from every other application.

Manageability: Each worker is deployed and monitored independently.

Locality: Each worker runs in a specific worker cloud, the US, EU, Asia-Pacific, etc
Usage notifications Yes
Usage reporting Email


Infrastructure or application metrics Yes
Metrics types
  • CPU
  • HTTP request and response status
  • Memory
  • Number of active instances
Reporting types
  • API access
  • Real-time dashboards


Supplier type Reseller providing extra features and support
Organisation whose services are being resold MuleSoft

Staff security

Staff security
Staff security clearance Other security clearance
Government security clearance Up to Security Clearance (SC)

Asset protection

Asset protection
Knowledge of data storage and processing locations Yes
Data storage and processing locations
  • European Economic Area (EEA)
  • Other locations
User control over data storage and processing locations Yes
Datacentre security standards Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency At least every 6 months
Penetration testing approach Another external penetration testing organisation
Protecting data at rest
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Encryption of all physical media
Data sanitisation process No
Equipment disposal approach Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Backup and recovery

Backup and recovery
Backup and recovery Yes
What’s backed up Any data persisted in Anypoint is stored reliably and backed-up.
Backup controls Backups are automated.
Datacentre setup Multiple datacentres with disaster recovery
Scheduling backups Supplier controls the whole backup schedule
Backup recovery Users contact the support team

Data-in-transit protection

Data-in-transit protection
Data protection between buyer and supplier networks
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
Data protection within supplier network TLS (version 1.2 or above)

Availability and resilience

Availability and resilience
Guaranteed availability MuleSoft Cloud Offerings have a 99.99% SLA.

Percentage credit for monthly fees:
99.95 to 99.5% - 5% credit for monthly fees
99.4 to 98% - 10% credit for monthly fees
Less than 98% - 15% credit for monthly fees
Approach to resilience Available upon request and under NDA
Outage reporting Public status page and email. See

Identity and authentication

Identity and authentication
User authentication
  • Identity federation with existing provider (for example Google apps)
  • Username or password
Access restrictions in management interfaces and support channels The Anypoint platform implements role-based access controls and custom permissions.
Access restriction testing frequency At least every 6 months
Management access authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
Devices users manage the service through
  • Dedicated device on a segregated network (providers own provision)
  • Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

Audit information for users
Access to user activity audit information Users have access to real-time audit information
How long user audit data is stored for At least 12 months
Access to supplier activity audit information You control when users can access audit information
How long supplier audit data is stored for At least 12 months
How long system logs are stored for User-defined

Standards and certifications

Standards and certifications
ISO/IEC 27001 certification No
ISO 28000:2007 certification No
CSA STAR certification No
PCI certification Yes
Who accredited the PCI DSS certification Available on request
PCI DSS accreditation date 11/11/2014
What the PCI DSS doesn’t cover MuleSoft is a level-1 PCI service provider
Other security accreditations Yes
Any other security accreditations
  • SSAE 16 SOC 2
  • FIPS 140-2
  • HiTrust

Security governance

Security governance
Named board-level person responsible for service security Yes
Security governance accreditation Yes
Security governance standards Other
Other security governance standards SSAE 16
Information security policies and processes MuleSoft’s dedicated security team follows industry
best practices, runs internal security audits and maintains policies that span operations, data
security, passwords and credentials, and secure connectivity.
As all our cloud services are built on the AWS platform, we rely on Amazon’s leading
physical and network security. MuleSoft also enforces operation controls based on industry
standard best practices for public cloud services, including, but not limited to:
• Principle of least privileged access
• Role based access controls
• Data security (not storing sensitive data, encrypting data at rest, and more)
• Regular audits
• Customer advisories and established escalation processes
• Penetration testing

Operational security

Operational security
Configuration and change management standard Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Configuration and change management approach MuleSoft uses a secure software development lifecycle (SDLC) methodology and standards. An SDLC document is available upon request and under NDA.
Vulnerability management type Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Vulnerability management approach Available upon request and under NDA.
Protective monitoring type Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Protective monitoring approach Available upon request and under NDA.
Incident management type Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
Incident management approach Available upon request and under NDA.

Secure development

Secure development
Approach to secure software development best practice Conforms to a recognised standard, but self-assessed

Separation between users

Separation between users
Virtualisation technology used to keep applications and users sharing the same infrastructure apart Yes
Who implements virtualisation Third-party
Third-party virtualisation provider Amazon Web Services (AWS)
How shared infrastructure is kept separate CloudHub workers serve as a secure instance for transmitting and processing data by giving each application its own independent virtual machine. Each worker is fully isolated from other tenants.

Energy efficiency

Energy efficiency
Energy-efficient datacentres Yes


Price £54000 per unit per year
Discount for educational organisations No
Free trial available Yes
Description of free trial A 30-day trial version of the MuleSoft Anypoint Platform is available for anyone to sign up to.
Link to free trial


Pricing document View uploaded document
Skills Framework for the Information Age rate card View uploaded document
Service definition document View uploaded document
Terms and conditions document View uploaded document
Return to top ↑