Our Microsoft Fabric workload vendor attestation.

CloudMonitor is an Azure FinOps platform, purpose-built on Microsoft Fabric, that gives organizations the visibility, prioritized recommendations, and audit trail to govern cloud cost and proactively reduce Azure consumption. It is a read-only experience that connects to Azure billing via FOCUS exports with scoped, read-only access and allocates every dollar of spend to a cost group.

• Full cost visibility — drill from a monthly invoice down to a single resource across every subscription, resource group, and cost group, each tied to an accountable owner.
• Prioritized optimization — right-sizing, reservations and savings plans, idle and orphaned resource cleanup, storage tiering, and hybrid licensing, ranked by dollar impact.
• Anomaly detection — severity-tiered alerts routed to the right cost-group channel via the Microsoft Teams bot within minutes.
• Cost accountability — showback, chargeback, and shared-cost allocation aligned to the FinOps Foundation Framework.
• Proven outcomes — Clinic to Cloud 46%, XContent 50%, and Transport for NSW 22% OpEx reduction.

• Yes — an easy, fast, free trial that lets customers explore the workload for a limited time, in line with Microsoft trial guidelines.

A free, guided trial runs against your own Azure data at cloudmonitor.ai/beta/, with no manual provisioning wait.

• Yes — available on the commercial marketplace for customers to procure, per the monetization guidelines.

Marketplace offer: CloudMonitor Analytics Engine on Azure Marketplace.

• No other authentication and authorization mechanisms are used.

CloudMonitor authenticates with a multi-tenant Microsoft Entra application. Your users authenticate against their home Entra tenant; no guest objects are created in the CloudMonitor directory. Access tokens are obtained through the Fabric Workload Client SDK JavaScript APIs.
Microsoft Entra application (client) ID: aaa49767-1105-4e41-9658-3826a8686c96.

• All data and metadata is stored in OneLake or Fabric Data Stores.

All CloudMonitor data and metadata is stored in OneLake or Fabric Data Stores (Lakehouses, a SQL database, and semantic models) in a Microsoft Fabric workspace dedicated to and isolated for your tenant.

CloudMonitor relies on standard Entra tokens issued by the Fabric host, so your Conditional Access policies (MFA, device compliance, network location) are expected to apply transparently. Validation against representative Conditional Access policies is in progress.

• Microsoft Fabric Admin APIs are being used (/admin/*).

CloudMonitor reads estate metadata through Fabric Admin REST APIs, including the Scanner (metadata) and Activity Events APIs, for governance and inventory reporting.

• Health and telemetry data, including activity ID, is retained for a minimum of 30 days for customer support purposes, including trials.

• Cross-tenant B2B collaboration supported.
• Workload item access only within the tenant.

Item access is scoped to within your tenant. The multi-tenant app lets users from any tenant authenticate against their home tenant, but workload items are not shared cross-tenant.

Data-Driven AI maintains a BCDR plan covering unplanned disruption and recovery for the hosted SaaS, summarized in the Information Trust Center. RPO/RTO are not published.

Vendor support personnel monitor, test, and track performance through internal instrumentation. The end-user performance-tracking approach for general availability is being finalized.

• Service availability and colocation/alignment in the Fabric regions below.

Azure Public cloud. Available in East US (Virginia), West Europe (Netherlands), Southeast Asia (Singapore), Australia East (Sydney), and Brazil South (São Paulo). Any Fabric-supported region can be added on request.

• The workload uses Fabric Public APIs.

• English is the supported language.

Localization may be added in a future release.

CloudMonitor is a read-only cost-visibility and Fabric-monitoring experience built on the Fabric UX System. No variances or exceptions requested.

• Uses Fabric’s default naming experience (createItemDialogConfig).

Read-only reporting with no user-initiated long-running jobs; data ingestion runs as a backend pipeline, not as a Fabric job surfaced to the user.

CloudMonitor targets WCAG 2.1 AA conformance. A formal accessibility assessment is in progress.

CloudMonitor is a read-only experience; no item settings panel is implemented.

A guided trial against your own Azure data is offered; preconfigured sample items are not shipped.

No custom item actions in this release.

Not supported in this release.

Not supported in this release.

Protecting your data and metadata is paramount. CloudMonitor operates an ISO/IEC 27001-certified Information Security Management System, with security reviews and assessments performed periodically. Access to Azure billing is scoped and read-only; data is encrypted in transit and at rest. ISO audit report issued 7 January 2026 (certification body Equal Assurance); available on request. See the Information Trust Center and Data Security Statement.

• Only essential HTTP-only cookies are used, and only after positively authenticating the user.
• No third-party cookies are used or relied on.
• Any Microsoft Entra token is obtained using the Fabric Workload Client SDK JavaScript APIs.

Privacy policy: cloudmonitor.ai/privacy-policy/. A privacy assessment and review are performed periodically.

CloudMonitor is hosted in Azure. Our data-residency commitment is set out in the Data Security Statement — your billing data stays in the region you choose at sign-up.

CloudMonitor aligns to the following certifications and standards:

• ISO/IEC 27001 — Information Security Management
• ISO 9001 — Quality Management
• ISO/IEC 42001 — AI Management System (Certificate of Verification)
• FinOps Certified Specialty Solution (FinOps Foundation)
• Microsoft Solutions Partner — certified software for Azure

Certification body: Equal Assurance. Certificate numbers available on request.

Microsoft direct vendor outreach and customer support contact: click here to open Finn and raise a support ticket.

• Support information is published to the marketplace offering and available to users via the workload.

Help desk and self-service portal: cloudmonitor.ai/docs/.

Service health, availability, and uptime are published on our live status dashboard at https://status.cloudmonitor.ai/.

Application Life Cycle Management (ALM) is not supported in this release. CloudMonitor is a read-only cost-visibility and Fabric-monitoring workload with no user-authored item definitions to deploy, so deployment pipelines and Git integration do not apply.

Not supported in this release; no CI/CD manifest section.

Items cannot be restored with their definition in other workspaces.

Not supported in this release.

Not supported in this release (not a Data item in this release).

Not supported in this release.

Not supported in this release.