Managed Drupal Website Hosting Services

The Vendor is required to provide secure, managed Drupal website hosting.
- Platform Architecture
•    Distributed container-based instances, with isolated platform components as independent services
•    Ability to scale horizontally by spreading across any number of containerized instances to handle traffic spikes
•    Integrated Global Content Delivery Network
•    Managed HTTPS via Let’s Encrypt at no extra cost
•    High performance tuned stack including nginx, php, solr, varnish, redis, mariadb, and a distributed file system
•    Support for both Drupal and Wordpress
- Environment Workflow and Development Tools
•    Provide develop and test environments
•    Provide isolated development environments for every git branch, allowing users to spin up environments directly from the dashboard or Command Line Interface without filing a support ticket
•    Automated deployment tools for managing releases, allowing continuous integration with Github and CircleCI
•    Unlimited Sandbox environments for new properties
•    Platform hooks to allow for automation and connection with continuous integration and delivery services.
•    Allow Drush commands and server provisioning via scripting to power automation
•    Centralized site management dashboard
•    Team management tools for developers and site administrators
- Performance and Monitoring
•    Bundled subscription to New Relic APM Pro for every site and environment
•    Uptime monitoring and alerts for every site and environment
•    Provide code-level visibility to every website performance
•    99.95% uptime service level agreement
- Disaster Recovery
•    Highly-available instances, resilient to single component failures, recoverable in the unlikely event of data center failure, not reliant on the services of any single employee
•    Automated nightly backups that are redundantly stored and portable off-platform
•    One-click backup
•    One-click restore to a specified backup
•    Data residency and region availability in country
- Security and Compliance
•    Resource isolation for memory, disk, CPU, and other server resources
•    Prevent direct execution, even within the containers, of files uploaded through the website
•    Layer 3 & 4 DDOS Protection and Mitigation
•    Bundled antivirus protection to ensure our system's integrity and to prevent malware from spreading through the properties
•    Guard against network intrusions, detecting and preventing unauthorized host access
•    Provide a global firewall that allows for signature-based rules filtering, DDoS Protection filtering, IP filtering, and geo-fence filtering
•    Allow for rate limiting configuration to guard against abusive traffic and behavior
- Technical Support
•    24x7x365 chat and phone support, as well as ticketing and escalating support by plan.

- Contract Period/Term: 3 years
- Questions/Inquires Deadline: September 23, 2025