Itequia Cloud Operations
Your Microsoft platform: secure, properly licensed and up to date.
Technical operation and support for Microsoft 365, identity, devices, security, Azure, Copilot and Dynamics 365, in a single modular contract. With a written and measured catalog, not a promise of availability.
- Building and running technology since 2008
- Microsoft Partner since 2010
- 200+ large organizations as clients
- ISO 27001 certified
- 60+ in-house professionals in Barcelona and Madrid
- Our own SaaS services and solutions
THE STARTING POINT
The tenant grows faster than the IT team
You pay for a top-tier platform and run it at half performance.
MORE SURFACE
The tenant is no longer just email and files
It concentrates identity, devices, collaboration, security, automation and, more recently, AI.
MORE CHANGE
Microsoft changes the platform every week
New features, different default values and features being retired.
LESS TIME
The IT team lives in reactive mode
It handles whatever comes in and never gets to what should be reviewed. Often, everything depends on one to three people.
MORE RISK
What isn't reviewed becomes silent risk
Open permissions, automatic external forwarding, accounts without MFA, licenses paid for and unused.
And if the person who runs it all leaves, nobody knows exactly what is configured or why.
What changes with a managed operation
From firefighting to operating with a catalog, a calendar and evidence.
TODAY
Day-to-day operation, without a method
- Nobody reviews the tenant systematically
- Incidents compete with projects for the same team
- Microsoft changes are discovered when something breaks
- Licenses pile up without review
- When a problem is beyond the team, there is nobody to escalate to
Result: unseen risk and licenses that don't deliver
WITH ITEQUIA CLOUD OPERATIONS
Operation that is written, measured and backed by evidence
- A catalog of proactive tasks with a calendar and evidence
- A single entry point for incidents and requests
- Announced changes are reviewed before they have an impact
- Monthly review of consumption and licenses
- A specialist second-line support behind the IT team
Result: a secure, efficient and up-to-date platform
Three blocks, a single contract
Each block is activated product by product: they can be contracted together or separately.
01
Reactive support
- Incidents, requests and alerts on any product in scope
- Second-line support for the IT team
- First-line support for users, if desired
- Escalation to Microsoft managed by us
02
Proactive operation
- A catalog of recurring tasks to keep the platform secure and up to date
- More than 100 tasks across more than 16 product groups
- Frequencies from daily to semiannual
- Record and evidence of every execution
03
On-demand requests
- One-off technical work, consulting and training
- What is neither an incident nor a recurring task
- By hours worked or at a fixed price
- 6-month warranty on fixed-price work
A single contract, a single team, a single entry point. It also includes management of the subscriptions and licenses supplied by Itequia.
BLOCK 1
Reactive support, at the level you need
Everything comes in through a single, traceable point: our portal or your ticketing system.
INCIDENT
Something has stopped working
Mail routing, permissions, synchronization, call quality.
REQUEST
Someone needs something
User onboarding or offboarding, shared mailbox, guest access, quarantine release.
ALERT
The platform detects something
Risky sign-in, DLP incident, non-compliant device, phishing.
BY DEFAULT
Second-line support
Your IT team serves its users and has specialists behind it for anything that requires deeper knowledge of the platform.
- Specialists by domain: identity, email, security, devices
- Your IT team keeps the relationship with its users
- Someone to escalate to when a problem is beyond them
IF DESIRED
First-line support too
We serve users directly for usage questions, queries and incidents, and escalate internally whatever requires it.
- Sharing a file with an external party
- Recovering a previous version of a document
- An email that doesn't arrive or Outlook that doesn't sync
BLOCK 2
Proactive operation: a written and measured catalog
The goal is not just for the platform to work: it's for it to be secure, efficiently licensed and up to date.
+100
recurring tasks, written down, with a defined frequency and reference time
+16
product groups, from Microsoft 365 and Entra ID to Defender, Azure, Copilot and Dynamics 365
5
frequencies: daily, weekly, monthly, quarterly and semiannual
Each task has a frequency and a reference time: the agreed scope translates directly into hours per month.
Daily
- Microsoft 365 Service Health
- Risky sign-ins
- Device compliance
- Triage in Defender XDR and Sentinel
- Copilot credit consumption
Weekly
- MFA adoption
- Microsoft Message Center
- Automatic external forwarding
- Backup verification
- Vulnerability management
Monthly
- Conditional Access policies
- Privileged roles (PIM)
- SharePoint permissions and anonymous links
- Expiring secrets and certificates
- License optimization
Quarterly and semiannual
- SPF, DKIM and DMARC
- Formal access reviews
- Retention policies
- Attack simulation
- Dynamics 365 release waves
An excerpt of the catalog, customized product by product. Each execution leaves a record and evidence, usable in ISO 27001, ENS or NIS2 audits.
BLOCK 3
On-demand requests and how they are billed
No hour banks: what is included is carried out; what is not included is billed the way you choose.
INCLUDED IN SCOPE
No additional cost
Proactive catalog tasks and reactive support included for the contracted products, in the monthly fee.
OUT OF SCOPE
By hours worked
Actual time is billed. For one-off actions and emergencies.
OUT OF SCOPE
At a fixed price
Approved quote. For well-defined work, with a 6-month warranty.
Examples of requests: user onboarding or offboarding with the whole associated chain, device enrollment with Autopilot, a new Conditional Access or DLP policy, a new log source in Sentinel or a consulting or training session.
SCOPE
The products we cover
Administration, configuration and operation of the Microsoft platform in the cloud.
Productivity and collaboration
- Microsoft 365 Admin Center
- Exchange Online
- SharePoint and OneDrive
- Microsoft Teams
Identity, devices and infrastructure
- Microsoft Entra ID
- Microsoft Intune
- Microsoft Azure
Security and compliance
- Microsoft Defender (Office 365, Endpoint, Identity, Cloud Apps, XDR)
- Microsoft Sentinel
- Microsoft Purview
Artificial intelligence
- Microsoft 365 Copilot
- Copilot Studio
- Microsoft Foundry
Business applications
- Power Platform
- Dynamics 365
And other cloud services provided by Itequia. Developments (code or low-code) are not part of Cloud Operations: they are contracted as a project or Extended Team.
HOW IT IS CONTRACTED
You contract what you need, step by step
A service configured product by product, not a closed package.
01
Scope
Which Microsoft platform products are included in the service.
02
Proactive operation
Which recurring tasks are activated in each of those products.
03
Reactive support
Support line (second, or first too) and included volume, sized after a meeting.
04
On-demand requests
By hours worked or at a fixed price, as you decide in each case.
A number of hours per month and a price, with details of what is executed and when. The scope is adjusted at each quarterly review. From signing to operation, with one week of onboarding. Monthly report and follow-up committee with your IT team.
The difference from generic support
A written and measured catalog, not a promise of availability.
01
A written and measured catalog
More than 100 tasks with a name, frequency and reference time. The scope translates into hours per month, not promises.
02
Specialists by domain
Identity, email, security, devices, Azure, Copilot and Dynamics 365: a second-line support for the IT team.
03
Certified security
ISO 27001 certified. Delegated access with scoped roles and PIM, and evidence ready for ISO 27001, ENS or NIS2 audits.
What you get
01
A secure, up-to-date platform
Security and compliance tasks executed on a schedule.
02
Specialist second-line support
Behind the IT team and, if desired, for users.
03
Monthly visibility
What has been done, what has been found and what we recommend.
04
Licenses that perform
Review of usage and unused licenses.
05
Evidence for audits
Record of each execution for ISO 27001, ENS or NIS2.
06
Predictable cost
Monthly fee for the included scope; anything else, by the hour or at a fixed price.
Where Cloud Operations fits
Cloud Operations operates the platform. It works on its own or together with Itequia's other services.
GOVERN AI
AI Governance
Which AI is used in the organization. Cloud Operations then operates Copilot and its permissions.
OPERATE THE PLATFORM
Itequia Cloud Operations
Microsoft 365, identity, devices, security, Azure, Copilot and Dynamics 365.
OPERATE THE APPLICATIONS
User adoption and support
Support, adoption, maintenance and small enhancements of business solutions.
BUILD
AI-Driven Development
Applications, integrations and automations, when what you need is a development.
Want to know how your tenant is doing today? We review it together in a technical review, no commitment.
Why Itequia?
AI at the core of how we work. Our own AI-Driven method, applied across the entire lifecycle, to take solutions to production in weeks, not months.
We build it, we run it. Consulting, development, Microsoft and cybersecurity with a single partner, from assessment to operations, with the same point of contact throughout.
Security we practice. ISO 27001 certified, with automated code security analysis in every delivery and experience in regulated environments: banking, pharma, manufacturing and the public sector.
Your feedback, with its own channel. A Customer Experience team, independent from the people delivering your project, tracks your satisfaction so we can correct course in time.
Organizations that trust us
Frequently asked questions
With the catalog and the number of users: each task has a frequency and reference time, and the scope translates into hours per month. If activity grows notably beyond what was sized, the terms are reviewed jointly.
No. The monthly fee covers the current month and does not generate a balance. Anything not included is billed by hours worked or at a fixed price, your choice.
Second level by default. First level for users, if you wish, we size after a meeting with you.
No. Developments (code or low-code) are contracted as a project or Extended Team, and their maintenance, with User adoption and support.
Yes. Each execution of the catalog leaves a record and evidence, usable in ISO 27001, ENS or NIS2 audits.Yes. Each execution of the catalog leaves a record and evidence, usable in ISO 27001, ENS or NIS2 audits.
Does your IT team live in reactive mode?
We propose a technical review of the tenant, with real data and no commitment.