Your Azure foundation, compliant with Québec's Law 25 — delivered in 10 days, at a fixed price
Segmented network, governed access, centralized logs: the same architecture that runs our own SaaS platforms, deployed in your tenant through infrastructure-as-code. No billing surprises, no months of consulting.
Three pressures, one answer
Compliance and security almost always come through the same door. The foundation answers them once and for all.
Law 25 requires it
You must show where your data lives, who accesses it and how incidents are logged. "We trust our IT" is not an acceptable answer for Québec's privacy commission (CAI).
Your cyber insurer asks the same questions
Mandatory MFA, network segmentation, retained logs, tested backups. A questionnaire filled in wrong means a doubled premium — or no coverage the day it matters.
Your Azure grew without a plan
Resources created by hand, services exposed publicly, no cost control, no one sure who can access what. Every month that passes makes the cleanup more expensive.
The SIGPSC Azure Foundation
A proven architecture, deployed as code, identically, for every client. You don't pay for hours: you buy a result.
- Segmented network: your production environments isolated from the rest
- Managed Azure firewall filtering all inbound, outbound and internal traffic
- Admin access with no Internet exposure (Bastion, MFA)
- Centralized logging retained 12 to 24 months
- Automatic policies: encryption, Canada data residency, tagging
- Security and budget alerts configured from day one
- Deployment pipelines handed to your team — you stay the owner
- 100 % auditable, reproducible and reversible deployment
What you receive
Three documents you hand, as-is, to your insurer, your lawyer or your auditor.
Law 25 compliance matrix
Each requirement of the law mapped to the deployed Azure control that satisfies it.
Access and roles register
Who can do what, where, and how it's revoked when someone leaves.
Cyber insurer file
Documented answers to the technical questions on your renewal questionnaire.
A gap found? We fix it at no charge.
If, within 60 days of delivery, a gap against the Law 25 requirements covered by our scope is found, we correct it at no charge. The risk of getting it right is ours, not yours.
Scope defined at the scoping workshop and recorded in your compliance matrix.
Three levels, zero billable hours
The price is fixed. The risk of overrun is ours.
- Segmented hub-and-spoke network
- Managed Azure Basic firewall
- Logging + Law 25 alerts
- Bastion access + MFA identities
- The 3 documentation deliverables
- Everything in Foundation, plus:
- Private endpoints (Key Vault, storage, data)
- Centralized private DNS
- Application environment ready
- Basic disaster recovery
- Foundation upkeep
- Quarterly compliance review
- Annual report for your insurer
- Continuous Azure cost optimization
- Managed SIEM option (Sentinel + SOC)
Azure consumption costs are extra, estimated transparently before signing (ballpark: $500–900/month depending on the package). Prices in Canadian dollars, taxes extra.
We run what we sell
This foundation is not a theoretical template: it's the architecture that runs our own SaaS platforms in production — payroll, school management, e-commerce. Every client deployment benefits from the fixes we apply to ourselves first. You receive the code and the pipelines: no dependency on us.
Four steps, nothing vague
Assessment
We analyze your Azure subscription and hand you a red / yellow / green report: exposure, logging, access, budgets.
Scoping workshop
Network ranges, environments, apps to connect, VPN options. The configuration of your foundation.
Deployment
Infrastructure-as-code, mid-point demo, acceptance with your IT team.
Handover
Training for your IT, transfer of code and pipelines, signed documentation deliverables.
What we're asked most
We already have an IT consultant.
$15,000 is a significant budget for us.
Are we too small for this?
Will we be dependent on SIGPSC?
What if we're already on Azure?
Do you do anything other than Azure?
Start by knowing where you stand
2 hours, no commitment, a concrete report you keep — whether you work with us afterward or not.
Or write to us directly: ventes@sigpsc.ca · reply within one business day