Readiness check

Every implementation, with its fee and delivery window.

Three fixed-fee Azure tiers, add-on modules that build on them, and private data platforms. Each one lands in your own repository with its design document, decision records, and runbooks.

Azure foundation tiers

Fixed fee, fixed window, founding cohort pricing. Compare them side by side on Cohort Offers.

  • Tier 1

    Cloud Governance Foundation

    Management group hierarchy, subscription vending, least-privilege Entra ID roles, and budget alerts, with no runtime services to pay for.

    $12,0005 business days$0/mo Azure idle

  • Tier 2

    Compliance Guardrail Pack

    Azure Policy in Audit and Deny modes for one framework, a control traceability matrix, and evidence exports your auditor can sample.

    $24,0005–10 business days$0/mo Azure idle

  • Tier 3

    Platform Transit Hub

    Hub-and-spoke or Virtual WAN transit with Azure Firewall, Bastion, central Log Analytics, and private DNS, ready for migrated workloads.

    $48,00010–15 business days~$1,400–1,800/mo Azure idle

Add-on modules

Scoped builds on your existing Azure foundation after we review it, or on one built with our tiers.

  • Add-on module

    Azure SQL Database Migration

    Online migration from on-premises SQL Server to Azure SQL Managed Instance or Hyperscale, with private endpoints, transparent data encryption, and a dry run before cutover.

    $25,0001–2 weeks

  • Add-on module

    Multicloud Transit Hub

    Transit routing between Azure Virtual WAN or Route Server, AWS Transit Gateway, and GCP Cloud Router, with active-active BGP and firewall inspection in the path.

    $30,0001–2 weeks

  • Scoped module

    Private AKS with WAF ingress

    A private Kubernetes API server, Application Gateway WAF v2 in front of the cluster, private DNS, and secrets delivered from Key Vault.

    Quoted after assessment

Data platforms

Private lakehouses and data services with no public endpoints on compute.

  • Add-on module

    Azure AI Lakehouse Module

    A private Databricks workspace with Unity Catalog, no public IPs, customer-managed keys, and private Azure OpenAI endpoints.

    $35,0001–2 weeks

  • Scoped module

    Private Databricks with Palantir Foundry

    Databricks in an injected virtual network with Private Link on the front end and back end, Unity Catalog governance, and a private connection to Palantir Foundry.

    Quoted after assessment

  • Data platform

    Cloudera Private Cloud Data Services on Azure

    A hybrid data platform with Kerberos authentication, Ranger policy enforcement, Atlas metadata cataloguing, and isolated compute clusters. Ask ahead of release.

    Available Q4 2026

Not sure which one fits?

Three questions place you on a tier, or book a free 30-minute architecture assessment.

Take the readiness check Book an assessment View Cohort Offers