Supplier Data Processing/Analytical Services

Question

Scenario

• Company A has an Azure Tenant and regulatory approval to store and process sensitive data
• Company B provides data processing and analytical services in Azure (sql database/warehouse, adf, blob storage etc) and does not have regulatory approval to store sensitive data

Company A procures Company B to provide the processing and analytical services. Is there an Azure architectural pattern that allows Company B to provide the services without storing the data (at any time) and protects the intellectual property of Company B.

Can a resource group be migrated to Company A that only Company B has access to; Company A could apply a cost limit to protect financial risk? Could a Resource Group persist in Company B tenant but process the data in Company A tenant?

I'd have thought it was a fairly typical practice.

Answer 1

Hi@jase jackson USA ,

Thanks for your query and using this forum.

Though your requirement involves multiples areas of Azure, I would like to share the info which I have gathered from few internal sources and my research.

1. Company A procures Company B to provide the processing and analytical services. Is there an Azure architectural pattern that allows Company B to provide the services without storing the data (at any time) and protects the intellectual property of Company B. The simplest solution is to:
   -Deploy the solution into Company A’s subscription, and grant Company B users B2B access to perform services there.
   -Protect the intellectual property of Company B with a contract.
2. Can a resource group be migrated to Company A that only Company B has access to; Company A could apply a cost limit to protect financial risk? Could a Resource Group persist in Company B tenant but process the data in Company A tenant? Here are couple of articles by community members/MVP which explain on how to move Azure resources from one tenant to anther tenant.
   - How-to Migrate Subscriptions from one Azure AD tenant to another
   - How to move resources between subscriptions under different tenants?

Hope this information helps.

Disclaimer: This response contains a reference to a third-party World Wide Web site. We are providing this information as a convenience to you. Microsoft does not control these sites.

----------

Thank you
Please do consider to click on "Accept Answer" and "Upvote" on the post that helps you, as it can be beneficial to other community members.