IRAP assessed hosting
IRAP assessed Drupal hosting
Managed hosting for Drupal on infrastructure IRAP assessed at the OFFICIAL:Sensitive level. Containers, managed databases, CDN and WAF included — with the audit logging, backups, and sovereignty your agency requires.
Application hosting
Managed Drupal hosting
Deploy Drupal or Drupal CMS from a pre-configured template and run it as a fully dynamic application. Containers are managed with health checks and autoscaling, the database is provisioned for you, and every request passes through the CDN and WAF.
- Legacy and current Drupal versions, including Drupal CMS
- Managed MySQL 8.4 or PostgreSQL with Multi-AZ option
- CDN, WAF, and DDoS protection in front of every request
- Automated backups with on-demand restore to any environment
Explore Drupal cloud hosting
Optional hardening
Static delivery with the Quant module
For an extra layer of security, the official Quant module syncs published content to the edge so the public site is served as static pages. Editors keep working in Drupal as normal, while the origin can be locked away from the internet entirely.
- Public pages served static from the edge
- Origin restricted or fully offline between publishes
- Editors keep their existing workflow
- Native module with 7 submodules for sync, search, and forms
Explore the Drupal integration
What IRAP assessed hosting includes
Your Drupal site inherits the same assessed platform controls.
Immutable audit logging
Multi-region audit trails with log file validation capture every administrative action.
- 7-year (2,555-day) retention
- Object Lock in COMPLIANCE mode
- Network flow logs on every VPC
Automated backups
Daily database backups, plus on-demand database and filesystem backups you control.
- 30-day automated retention
- Restore to any environment
- Multi-AZ database option
Australian data sovereignty
Workloads run in Melbourne with Sydney as the secondary region. Data at rest stays in Australia.
- Melbourne primary region
- Sydney secondary region
- Australian owned and operated
Encryption everywhere
Encryption at rest and in transit for every workload, with managed key infrastructure.
- AES-256 at rest
- TLS 1.2 minimum in transit
- HTTPS-only origins
Access control
Strong authentication and least-privilege access for every account and API client.
- MFA and passkeys
- SAML single sign-on
- Role-based access and scoped API tokens
Network security
Defence in depth from the edge to the container.
- WAF with OWASP paranoia levels
- DDoS protection and rate limiting
- Protective DNS and per-tenant isolation
IRAP assessed Drupal hosting FAQs
Can I run Drupal on IRAP assessed infrastructure?
Yes. QuantGov Cloud is IRAP assessed at the OFFICIAL:Sensitive level, and Drupal runs as a managed containerised application with a provisioned database, CDN, and WAF. Your Drupal site inherits the platform controls covered by the assessment.
Do I have to use static delivery?
No. Drupal runs as a normal dynamic application behind the CDN and WAF. Static delivery via the Quant module is an optional extra layer that serves public pages from the edge and lets you restrict access to the origin.
Which Drupal versions are supported?
Current Drupal versions including Drupal CMS via the native Quant module, with extended support for legacy Drupal sites. The module includes 7 submodules covering content sync, search, forms, and more.
How does this compare to GovCMS?
QuantGov Cloud is an independent platform and is not affiliated with GovCMS. Teams familiar with GovCMS workflows will find a similar editorial experience, with direct control over modules, themes, and deployment.
How is my Drupal database backed up?
Databases are backed up automatically with 30-day retention. You can also take on-demand database and filesystem backups, restore to any environment, and run the database Multi-AZ for higher availability.
Deploy Drupal on assessed infrastructure
One-click deploy with the audit logging, backups, and sovereignty your agency requires.