Security / Buyer confidence
Your Microsoft environment.
Your data. Your control.
Your project information is a business asset. OpsWork's customer-owned deployment model keeps your Microsoft 365 and Azure environment at the centre, with permissions and review responsibilities defined around the work.
OWNERSHIP
A customer environment.
Not a shared project store.
The customer deployment uses your Microsoft 365 tenant and Azure subscription. Your email and SharePoint records provide the working context. There is no central OpsWork project-data lake to move into.
APPROVAL
Preparation is automated.
Commitments are yours.
Review client-facing, irreversible and material actions before completion. Your team retains engineering acceptance, commercial authority and statutory responsibilities.
PRACTICAL CONTROLS
Access follows the responsibility.
- Scoped access to records
- The customer Function App uses a managed identity, selected-site SharePoint access and scoped function-mailbox permissions.
- Your sign-in policies
- Microsoft Entra policies, including MFA and Conditional Access where licensed and configured, govern the people using the environment.
- Controlled support
- Support access is subject to customer authorisation, defined scope and revocation. It is not a reason for unrestricted routine access to project content.
- Decision records
- The approval model keeps the proposed work, review decision and supporting context connected. Storage policy and retention are part of the agreed setup.
THE DETAIL WHEN YOU NEED IT
Give your technical reviewer a clear starting point.
The architecture, permissions, data flows and supplier information belong together. Request the material for your procurement review, including any specific questionnaire.
Request procurement information ↗Ownership and location are different questions.
Customer ownership describes who controls the environment. Region, Microsoft service processing, approved sharing and support arrangements explain how information is handled.
Customer-owned deployment. Optional OCR sends selected document copies to Microsoft-managed UK South processing and temporary storage, logically isolated per customer, only after explicit customer-MD acknowledgement. No OpsWork-owned shared tenant is used for OCR.
Read the data residency explanation ↗Supplier assurance is separate from OpsWork organisational certification. No independent certification is claimed by this page.
Make ownership and approval part of your demonstration.
Arrange your demo ↗