Three fixed-fee Azure tiers for venture-backed SaaS, fintech, and healthtech teams. Answer three questions and the marker settles on yours.
Fixed fee, $0 to $48,000 Answer the questions to place the marker
Each tier has a fixed scope. The code, the documentation, and a handoff workshop come with all three.
| Deliverable | Tier 1: Cloud Governance Foundation$12,000 · 5 business days | Tier 2: Compliance Guardrail Pack$24,000 · 5–10 business days | Tier 3: Platform Transit Hub$48,000 · 10–15 business days |
|---|---|---|---|
| Management group hierarchy and subscription vending | Included | Included | Included |
| Cost guardrails and budget alerts | Included | Included | Included |
| Azure Policy | Baseline: deny unapproved regions | Audit and deny for your framework | Audit and deny, plus network inspection |
| Compliance framework | Not included | One of SOC 2, ISO 27001, PCI-DSS, HIPAA, or NIST 800-53 | Pre-integrated controls |
| Auditor evidence dossier and control traceability matrix | Not included | Included | Included |
| Hub-and-spoke network, firewall, Bastion, central logging, private DNS | Not included | Not included | Included |
| Design document, diagrams, decision records, runbooks | Included | Included | Included |
| Handoff | Half-day workshop | Half-day workshop, including a walkthrough of the evidence pack for your auditor | Full-day workshop and 14 days of post-handoff support |
| Azure idle cost | $0/mo | $0/mo | ~$1,400–1,800/mo |
| Code ownership | Yours | Yours | Yours |
Client names stay private. The architecture is described as it was built.
Payments · PCI-DSS 4.0
We moved the cluster's API server off its public endpoint onto Azure Private Link ahead of the PCI-DSS assessment. Application Gateway WAF now inspects traffic before it reaches the cluster, and Key Vault rotates secrets so nothing static sits on the nodes.
Read the engagementHealthcare · HIPAA
We built Azure Databricks with no public IPs on compute, and Unity Catalog row filters and column masks over patient data. Data reaches Palantir Foundry over a private link, so it never crosses the internet.
Read the engagementWant to talk to one of them? Ask for a reference call
Global Admin or Management Group Contributor on your tenant, and an empty Git repository in GitHub, Azure DevOps, or GitLab.
Inside your tier's window: 5, 5–10, or 10–15 business days. Everything is committed to your repository.
A workshop with your leads, with the runbooks and design documents already in your repository.
Or compare all three side by side on the offers page.