Straight answers
The questions we are asked before every demo.
Straight answers.
What Azure access does Equalis OpsReg require?
A Deploy-to-Azure ARM template assigns built-in read-only roles, Reader and Security Reader, scoped to the subscription you connect. Authentication is Managed Identity only: no stored tokens, no secrets, no credentials held anywhere on the platform.
Can I sign up with a personal email address?
No. Onboarding requires a business email address on your organisation's own domain. Public mailbox providers such as Gmail, Outlook.com, Yahoo and similar are not accepted. Each account is bound to a verified organisational tenant and the Azure subscriptions it owns, so the email domain has to belong to the organisation being assessed.
Do you use artificial intelligence to assess compliance?
No. Every one of the 437 rules is a boolean check written by a person against a specific framework article, versioned with an identifier, and evaluated against the actual Azure resource property. There is no model inference in the evidence path. This is deliberate: findings you cannot explain to a regulator are not worth producing.
Do you ever make changes to my Azure environment?
No. The platform reads subscription metadata via Azure Resource Graph. There is no write path, no policy push, no resource modification, and no code path that could be enabled to add one. Inform, Don't Act is an architecture-layer commitment, not a policy setting.
How long does onboarding take?
Onboarding takes 10–15 minutes end-to-end, from self-serve sign-up to your first completed compliance scan. Sign-up is self-serve with an email one-time-passcode; a business email address is required and personal mailbox providers are not accepted. Connecting a subscription is a single Deploy-to-Azure click. No CLI, no scripts, no sales call.
Where is my data stored?
All customer data is processed and stored exclusively in Azure North Europe (Ireland) and West Europe (Netherlands). The legal entity is Irish-incorporated and Irish-law governed. No data leaves the EU under any flow.
How is evidence retained?
Every evaluation record is write-once at the database layer and retained for seven years. Historical state is permanent, never updated and never deleted, so your evidence trail holds up years after the scan that produced it.
Can we buy through Azure Marketplace?
Yes. Equalis OpsReg is available on Azure Marketplace, and purchases count toward your Microsoft Azure Consumption Commitment (MACC). Direct sign-up with card payment is also available.