CIaaS Limited · Independent UK consultancy
CIaaS is an independent UK consultancy for Microsoft 365, Azure and identity, led by a CISSP with more than 30 years in the field. We advise, we implement – and when the right tool doesn’t exist, we build it. Six products so far.
What we build
Every CIaaS product began as a problem a real organisation actually had. We design, build and run them ourselves, on UK Azure infrastructure, to the same standards we recommend to clients.
Messaging governance · Charities, care & schools
Every work chat, on the record.
ComplyChat gives your people and the people you serve a familiar messaging experience they already know. Everything is captured, retained and fully auditable in your own Microsoft 365, so safeguarding, subject access and compliance hold up.
chat.org.ukFrontline workforce · Microsoft Teams
The whole operation, in their pocket.
StaffID turns the Microsoft Teams app your people already carry into a complete frontline hub – rosters, tasks, an LMS, messaging and attendance – with no separate app to install and no in-house IT team required.
staffid.netFacilities management · Cleaning & security
Your client sees what you see, in real time.
One real-time dashboard that cleaning and security contractors share with their building-owner clients.
i-site.co.ukSmart waste · Councils
Every bin, online. Every saving, measured.
Sensor-led waste monitoring and route optimisation for councils and operators, built on LoRaWAN.
binsense.co.ukIdentity governance · Source-available
Self-service Joiner, Mover, Leaver for everyone HR never sees.
Joiner, mover and leaver workflows for the volunteers, contractors and trustees HR systems never provision.
accountfactory.orgCompliance as code · Microsoft 365 & Azure
Write a control once. Prove it always.
Implement a control once, satisfy many frameworks, and evidence it continuously from your live tenant.
secure.org.ukWhat we do
From board-level governance to hands-on engineering, delivered as fixed-scope engagements with written, runnable outputs – not traffic-light decks.
Security aligned to what the organisation is actually trying to do – governance, risk appetite and a roadmap the board can own.
Internal and third-party risk, assessed and prioritised – including the suppliers who quietly hold your data.
Defence-in-depth design for cloud, hybrid and on-premises estates – built to be operated, not admired.
Prepare, detect, contain, recover – with procedures your team has actually rehearsed before the bad day.
Pragmatic support for Cyber Essentials, ISO 27001, UK GDPR, PCI DSS and NIST CSF 2.0 – evidence first, paperwork second.
Training that fits the audience, from trustees to frontline teams – not generic e-learning nobody finishes.
Continuous scanning with threat-led prioritisation, so the list gets shorter instead of longer.
Identity is the new perimeter. Zero Trust architecture, IAM, least privilege and MFA – the discipline behind Account Factory.
How we work
Short, fixed-price assessments of your Microsoft 365, Azure, identity or network estate. You get findings an engineer can act on the same week – with the evidence behind every one.
We implement what we recommend, or work alongside your team while they do – in your tenant, with your accounts, under your change control. Nothing leaves your environment.
Where something needs to keep running – continuous compliance, identity lifecycle, frontline operations – our products take over, without lock-in: you can walk away with everything still working.
About CIaaS
CIaaS – Compliant Infrastructure as a Service – is an independent consultancy led by Terry Sullivan, a CISSP-certified security specialist with more than 30 years across IT and cyber security.
The practice works where security decisions actually land: Microsoft 365 tenants, Azure subscriptions, identity platforms and the networks underneath them. Engagements are deliberately small, senior and fixed in scope – you work with the person who does the work.
The products came later, each one built because a client needed something that did not exist: governed identity lifecycle for volunteers, a frontline hub inside Teams, auditable WhatsApp, a shared real-time dashboard for contractors and their clients, bins that report their own fill levels, and compliance that proves itself. They are all run from the UK, by us.
Contact
A security worry, an identity project, or one of our products – whichever it is, your message goes straight to a person who can help.
CIaaS Limited
Registered in England & Wales
Company No. 14519311
Account Factory – accountfactory.org
StaffID – staffid.net
i-Site – i-site.co.uk
BinSense – binsense.co.uk
ComplyChat – chat.org.uk
Secure Compliance – secure.org.uk
Thanks – we’ll come back to you within one working day.