The beautiful tip of the iceberg
Most of what we build you'll never see. This is the part you can.
UK/EEA-region hosting on Microsoft Azure, backed by Microsoft's independently audited certifications and financially backed service level agreements.
| Is your hosting infrastructure located within the UK or EEA? | Yes Microsoft Azure within the UK/EEA — UK South (UK) or West Europe (Netherlands, EEA), agreed per engagement |
| Do your third-party hosting providers hold ISO 27001 certification? | Yes Microsoft Azure is ISO/IEC 27001 certified — see verification links below |
| Do you guarantee a minimum uptime SLA for hosted services? | Yes Backed by Azure's financially backed SLAs (typically 99.9%–99.99% per service); engagement-specific SLAs are agreed in writing |
Assemblysoft hosts customer solutions on Microsoft Azure. Services are deployed to Azure within the UK/EEA — UK South (London area) or West Europe (Netherlands) — with the region agreed on a client-by-client basis and recorded; a client requiring UK-only residency is deployed to UK South. Customer data at rest therefore remains within the UK/EEA. Resilience uses Azure's paired-region model within the same geography.
Where a customer has an existing Azure estate or a specific residency requirement (for example, EEA-only processing), deployment regions are agreed at the start of the engagement and recorded in the project documentation.
Microsoft publishes its data residency commitments for the UK geography, including the physical location of UK data centre regions, in the official documentation linked below.
Physical data centre security, environmental controls, and platform-level security are operated by Microsoft and covered by Microsoft's independently audited certification programme, which includes ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, ISO 9001, SOC 1/2/3, and the UK Government's Cyber Essentials Plus scheme. Certificates and audit reports are published by Microsoft and can be verified directly:
Hosted services are built on Azure platform services that carry Microsoft's financially backed SLAs — typically between 99.9% and 99.99% monthly uptime depending on the service and tier deployed (for example, Azure App Service and Azure SQL Database each carry a 99.9%+ SLA at standard tiers). The authoritative, current SLA for each Azure service is published by Microsoft:
Engagement-specific service levels — including any uptime commitment Assemblysoft provides on top of the platform SLA, support response times, and maintenance windows — are agreed in writing per engagement, consistent with our Master Services Agreement. This ensures the SLA you receive reflects the architecture actually deployed (single-region, zone-redundant, or multi-region) rather than a generic figure.
Architecture diagrams, region configuration, and the specific Azure services (and their SLAs) used for your solution are documented per engagement and shared directly. Contact hello@assemblysoft.com.