Government & Public Sector

Cloud governance for government.
Crown Commercial. Air-gap ready.

Zentej is a Crown Commercial Service supplier. ZAP is self-hosted in your government cloud tenancy — citizen data, security findings and compliance evidence never leave your environment. CE+, NCSC CAF and G-Cloud compliance monitored continuously.

Crown Commercial Service CE+ NCSC CAF CIS Azure 2.0 GDPR G-Cloud 14
Book a session 30 minutes · No commitment
CCS
Crown Commercial Service
Procurement simplified
Seconds
CE+ evidence generated
vs weeks manually
Air-gap
Deployment supported
No internet connectivity needed
Zero
Citizen data egress
G-Cloud data handling satisfied
Government compliance

CE+ and NCSC CAF.
Continuously monitored.

Cyber Essentials Plus
Mandatory for government contracts

CE+ is a mandatory requirement for UK government contracts involving personal or sensitive data. ZAP monitors all 5 CE+ technical controls continuously — firewalls, secure configuration, user access, malware protection and patch management. Evidence pack in seconds.

All 5 technical areas monitored continuously
Evidence pack on demand — assessor ready
Patch compliance surfaces failing VMs daily
NSG/firewall rules validated against CE+ requirements
One-click PDF for annual renewal
NCSC Cyber Assessment Framework
Cross-government security standard

NCSC CAF provides the assurance framework for government organisations. ZAP continuously monitors all four CAF objectives and provides evidence across all contributing outcomes.

Objective A: Managing security risk
Objective B: Protecting against cyber attack
Objective C: Detecting cyber security events
Objective D: Minimising impact of incidents
Full evidence pack covering all four objectives on demand
Air-gapped deployment

ZAP supports fully
isolated deployments.

For government environments with strict network isolation requirements — OFFICIAL-SENSITIVE, SECRET or above — ZAP supports fully air-gapped deployment with no internet connectivity requirements.

No internet connectivity required for ZAP operation
Offline compliance framework updates via secure package
Air-gapped ZAP AI using local model deployment
SIEM integration via on-premises message queue
Full governance and evidence generation in isolated networks
Used in defence and national security adjacent environments
Deployment options
Standard
ZAP in your cloud subscription. No data egress. All governance and evidence self-contained in your tenancy.
Multi-region
ZAP deployed across two regions for availability. Data replication within your subscription. DORA operational resilience.
Air-gapped
No internet connectivity. Isolated network. Offline framework updates. Local AI model. National security environments.
Crown Commercial Service

Procurement simplified.
CCS framework approved.

Zentej is a Crown Commercial Service supplier. ZAP can be procured through CCS frameworks by UK central government, devolved administrations, NHS organisations and local government — simplifying commercial and legal process.

Crown Commercial Service approved supplier
G-Cloud 14 Cloud Security Principles satisfied
No additional procurement justification required
Framework pricing available for CCS customers
OJEU threshold management simplified
Supplier pre-qualification through CCS framework
G-Cloud Cloud Security Principles
Data in transit protection
Asset protection and resilience
Separation between consumers
Governance framework
Operational security
Personnel security
Secure development
Supply chain security
Secure user management
Identity and authentication
External interface protection
Secure service administration
Audit information and alerting
Secure use of the service
Shadow AI in government

AI processing citizen data.
Governed before it creates an incident.

Government digital teams deploy AI tools faster than information governance teams can document them. ZAP detects every unapproved AI workload — before it processes data that requires GDPR or government data classification documentation.

AI tools deployed by data science teams without IG approval
LLMs connected to citizen data stores without GDPR Article 30 records
Unapproved AI in government Kubernetes clusters processing OFFICIAL data
AI analytics tools without algorithmic transparency documentation
Shadow AI processing data above the classification level of the deployment environment
Customer outcomes

What government organisations
achieve with ZAP.

Microsoft Azure
Central Government · CE+
6 weeks

CE+ assessment passed in 6 weeks. Crown Commercial framework procurement. NCSC CAF evidence on demand. Shadow AI in data science cluster detected and documented.

Azure Government
Local Government · Air-gap
Air-gap

ZAP deployed in fully air-gapped Azure Government environment. No internet connectivity required. Full governance and evidence generation in isolated network.

Azure · Multi-department
ICS · Multi-authority
1 view

Multiple local authority tenancies governed from one ZAP instance. Separate compliance scores per authority. Shared oversight dashboard. One annual CE+ renewal.

Frequently asked questions

Government and public sector
questions answered.

Yes. Zentej is a Crown Commercial Service supplier. ZAP can be procured through government frameworks, simplifying the commercial process for UK central government, devolved administrations and local government.
Yes. ZAP supports fully air-gapped deployment with no internet connectivity requirements. Used in environments processing OFFICIAL-SENSITIVE and above, where network isolation is a security requirement.
Yes. CE+ is monitored continuously across all 5 technical areas. Evidence pack on demand. CE+ is a mandatory requirement for government contracts involving personal or sensitive data.
ZAP continuously monitors all four NCSC CAF objectives — managing security risk, protecting against attack, detecting security events and minimising impact. CAF evidence pack available on demand.
Yes. G-Cloud Cloud Security Principles require cloud service providers to evidence how they handle government data. ZAP's self-hosted architecture, where data never leaves the government's own tenancy, satisfies the most stringent G-Cloud data handling requirements.
Yes. A single ZAP instance can govern multiple department tenancies with separate compliance scores, separate evidence packs and shared governance visibility for cross-department oversight.
ZAP is self-hosted — citizen data, personal data and compliance findings never leave the government environment. GDPR Article 30 Records of Processing Activities maintained. ICO registration requirements supported.
Yes. Unapproved AI workloads in AKS, EKS or GKE clusters detected within scan cycle. Particularly important for government departments where AI processing citizen data must be documented under the UK AI Act framework and GDPR.
Free · 30 minutes · No commitment

Discuss your government
procurement requirements.

CCS supplier. 30-minute session. We show you ZAP CE+ and CAF evidence on a live estate.

Book a session
No commitment· 30 minutes· [email protected]