Hosted on Microsoft Azure.
IDU Cloud is delivered through our partnership with Microsoft Azure. Your instance lives on the Microsoft network of Azure servers, hosted regionally so data does not leave the country, and managed under the security controls Azure already meets.
Encryption, password rules, and the Azure security stack.
End-to-end encryption
All sensitive data inside IDU is encrypted with 256-bit encryption. The database is password protected by default, and all transmissions between database and users — online or during updates — are end-to-end encrypted.
Multi-factor + admin-only
Only administrative users have access to the Azure instance itself. MFA is enforced. Clients can use Active Directory or single sign-on as a policy decision.
Azure security controls
Azure adheres to ISO 27001, ISO 27018, SOC 1, SOC 2, SOC 3, FedRAMP, HITRUST, MTCS, IRAP and ENS. Azure Defender is enabled on every machine.
Each client runs in its own isolated environment.
Microsoft Server 2022
A dedicated VM running Microsoft Server 2022, updated on the day Microsoft releases new server updates and restarted after-hours to avoid downtime.
SQL Server 2022
Database stored in SQL Server 2022, password-protected with a unique DB user. Updated alongside the VM as new updates ship.
Per-client applications
There are individual client applications per virtual machine — no shared application surfaces, no co-tenant exposure.
Locked-down ports, isolated VNets, real-time scanning.
Isolated VNet
The hosted VM sits on its own virtual network and is isolated from others. Single network interface, no shared subnets.
Strict port rules
HTTPS enforced on port 443. SQL (1433) and RDP (3389) restricted to specific admin and consultant IPs. HTTP redirects to HTTPS.
Real-time scanning
Webroot scans incoming network traffic in real time and Webroot Antivirus is installed on every VM, cloud-updated automatically. Azure Defender Firewall runs on the server itself.
Daily backups, 30-day retention.
Daily, retained 30 days
Backups are taken daily and retained for 30 days. The two most recent recovery points are application- and data-consistent snapshots; the rest are data-focused.
Same-region storage
Azure-level backups are hosted in the same data centre and associated with the machine, with the same at-rest encryption.
IDU Cloud Data Sheet
The full Cloud Data Sheet, with the security and networking detail laid out for forwarding to your IT team.
Downloads
Cloud is one of three. See the full deployment story.
On-premise, private cloud, and IDU Cloud all deliver the same functionality. Choose the platform best suited to your technology strategy.