NuraTrust

Azure consulting,
region-locked.

From landing zone to FinOps, we build and run Microsoft Azure estates
for the Kingdom’s most regulated workloads. KSA Eastern Province never outside.

Industries we serve

Built for industries that don’t tolerate handwaving. We
bring deep domain knowledge across the industries that
matter most to Vision 2030.

🏛️Government & SDAIA

⚡Energy & ARAMCO ecosystem

🎓Education & Madrasati

🏥Healthcare

🏦Banking & SAMA regulated

🏗️Giga projects (NEOM, ROSHN)

🛒Retail & e-commerce

🌐Telecom

Six things we do. Done all the way.

No frameworks for the sake of frameworks. Each engagement starts with a
discovery week and ends with a working system you can audit on your own.

☁️
Cloud migration
Lift-and-shift or full rearchitecture, we assess your workloads and plan the safest, fastest path to Azure.

📊
Data & AI
Azure Synapse, Fabric, and OpenAI Service deployments, including
Arabic-language AI aligned with ALLaM.

🏛️
Landing zone design
Azure Landing Zones and Well-Architected Framework assessments
tailored for Saudi public sector.

🔐
Security & compliance
Azure Sentinel, Defender, and local data residency configurations aligned with NCA and SDAIA requirements.

⚙️
DevOps & automation
CI/CD pipelines, infrastructure as Code with Bicep/Terraform, and AKS cluster management.

📚
Training & enablement
Hands-on Azure training for your internal teams, aligned with Microsoft
AI Academy goals for 100,000 Saudi professionals.

A typical engagement, week by week.

Fixed-scope, weekly written status. No SOW change orders unless something genuinely new shows up.

Week 1–2

Discovery

Two engineers, on-site or remote. Read your existing estate. Output: a written technical brief with a fixed-scope proposal.

  • Current-state architecture map
  • Risk + compliance register
  • Fixed-scope proposal

Week 3–6

Foundation

We stand up the landing zone, region-locked, hub-spoke, private endpoints, Key Vault, Sentinel. Bicep modules versioned in your repo.

  • Landing zone
  • Identity + access
  • Observability

Week 7-14

Migration

Workload-by-workload. Each migration ends with a dry-run rehearsal. We own the cutover weekend and the rollback plan.

  • Per-workload runbooks
  • Dry-run report
  • Cutover + rollback

Week 15+

Run

Optional managed run, or full handover. Either way, you get the documentation and the on-call runbooks.

  • Operational runbook
  • On-call rota
  • Monthly tenant review
IN SCOPE

✔️ Region-locked landing zone (UAE North / KSA Central)

✔️ Hub-spoke network + private endpoints

✔️ Identity (Entra ID) + role design

✔️ Key Vault + customer-managed keys

✔️ Microsoft Sentinel + Defender for Cloud

✔️ Bicep / Terraform IaC, in your repo

✔️ Migration runbook per workload

✔️ Cutover weekend ownership

✔️ Compliance evidence packet (PDPL, SOC 2, HIPAA)

✔️ Monthly tenant review

NOT IN SCOPE

X Application rewrites

X On-prem hardware decommissioning

X End-user training