Sovereign and compliance

Data residency and compliance on Azure Local

When a regulation or a contract says data must stay in a place, the design has to prove it. We map your requirements to settings and produce the evidence.

What we do

Scope of the work

  • Read the requirement and turn it into testable controls
  • Map each control to a platform setting or a procedure
  • Configure encryption, logging and retention
  • Use Azure Policy through Azure Arc to detect drift
  • Assemble an evidence pack for audit
What you receive
  • A control matrix: requirement, setting, evidence
  • Configured and verified controls
  • An evidence pack and the procedure to refresh it

Billed at $150.00 per hour. Ask Keith for an estimate.

Field notes

What we check first.

Evidence beats intention

An auditor wants output, dates and names. We collect them as part of the work.

Shared responsibility

You own more of the stack on premises than in Azure. The matrix shows who owns each control.

We are engineers, not auditors

We implement and evidence technical controls. Your compliance officer or auditor gives the formal opinion.

How an engagement runs

Four steps, written down.

I
Scope

A call with Keith

You describe the goal, the estate and the deadline. Keith turns it into a written scope with an hour estimate at the hourly rate.

II
Design

A written design by Gus

Gus reviews the environment and gives you a written design with each decision and its reason.

III
Build

Hands-on implementation

Gus implements in your tenant and your racks, remotely or on site, with every change logged as it is made.

IV
Hand over

Documents and a named contact

You receive the as-built record and the runbooks. Keith stays on as your account and project manager.

Questions

Asked before every engagement.

Which frameworks do you work with?

We map to whichever framework you must meet. Tell us the framework and scope and we build the matrix against it.

Does keeping data on premises make us compliant?

No. Location is one control among many. Access, logging, encryption and procedures matter just as much.

What does the consulting cost?

Consulting is billed at $150.00 per hour. Keith sends a written hour estimate after the scoping call, and work starts when you approve it.

Rate and contacts

One rate. Two people.

Consulting is billed at $150.00 per hour. Keith runs sales, project management and your account. Gus does the architecture, the design and the implementation.

Hourly rate
$150.00

per consulting hour, for every consulting service

Sales, project management and account management

Keith

keith@apexvanguard.ai
Architecture, design and implementation

Gus

gus@gusitllc.com

Independent practice, not affiliated with Microsoft. Azure Local consulting is part of the infrastructure consulting practice of Gus IT LLC, an independent firm. It is not affiliated with, endorsed by or sponsored by Microsoft Corporation, Dell Technologies, Fortinet or any other vendor named on this site. Microsoft, Azure, Azure Local, Azure Stack HCI, Azure Arc, AKS, Azure Virtual Desktop, Hyper-V and Windows Server are trademarks of Microsoft Corporation. Dell, PowerEdge, PowerSwitch and iDRAC are trademarks of Dell Inc. Microsoft Entra, Active Directory, SQL Server, FSLogix and BitLocker are also trademarks of Microsoft Corporation. Fortinet and FortiGate are trademarks of Fortinet, Inc. VMware and vSphere are trademarks of Broadcom Inc. Kubernetes is a registered trademark of The Linux Foundation. PostgreSQL is a trademark of the PostgreSQL Community Association of Canada. Linux is the registered trademark of Linus Torvalds. All other marks belong to their respective owners and are used for description only. Product capabilities follow each vendor's documentation and change between releases; we confirm the current state during scoping.