/ IT is a physical sport.
One IT standard for every plant.
Surya operates the Microsoft platform, the plant computing and day to day support for multi-site manufacturers, 24 hours a day, every day of the year. The tenant comes onto the standard first, then plants follow one at a time.

/ Before you sign
How the thirty days work.
/ 01
Day 0
A 30-minute call to pick the site and confirm there is a wall, power and a network port.
/ 02
Week 1
Surya delivers and installs the locker and stocks it with a small set of loaner devices configured to the standard for that site. Surya owns the loaners during the trial.
/ 03
Days 1-30
When a covered device at that site fails, the person goes to the locker. Obviously dead, straight to the locker. Might come back, a 30-minute restoration window on the Surya line, then the locker. Every swap is recorded.
/ 04
Day 30
Sign, and the organization comes onto the platform; the customer buys its own stock for the locker and the loaners go home. Do not sign, and Surya removes the locker. Nothing is owed either way.
One site, one locker, one trial per organization. Offered to organizations of 15 to 250 people with more than one site. The trial covers the locker and the swap; the platform, 24/7/365 operations and the AI foundation start at signature.
/ IT is a physical sport.
The work is in the building. So is the fix.
A plant line does not stop because the ticket queue is short. It stops because the line PC, the HMI support workstation, the label printer or the badge and time clock is dead and the replacement is two days away.
Surya is built for that: the replacement is already in the building, in the locker, configured to the standard, and the person who needs it can get it without waiting on anyone. The platform, the support line and the custody record run behind it.
Surya does not station people at your sites. The locker, the stock and the swap are the on-site presence; the operations behind them run around the clock from Surya.
- Four manufacturing sites served through one operating model
- 13 floor events in 17 months
- SOC 2 Type II examination complete
- NIST 800-88 certified erasure
/ What is included
Four layers, operated as one standard.
/ 01
Platform
Identity, sign-in, secure access, device management, security baseline and updates run to one supported configuration across the organization. The customer owns the tenant and the licenses. Surya operates it.
Detail/ 02
AI foundation
Identity, data governance, licensing assignment and device compliance are brought to the standard so the organization can adopt Copilot and Copilot Cowork on a controlled foundation.
Detail/ 03
Operations
L1 and L2 support, escalation with named owners and change control on the standard. A person can reach Surya at any hour, and the platform is monitored and operated at any hour.
Detail/ 04
Physical
An on-site badge-access smart locker goes in at every site on the standard, and one locker per site is included in the price. Around it run preparation, deployment, new hire readiness, replacement, recovery, repair routing, certified erasure, retirement and serial-level custody, with backup inventory at the Surya RTP distribution center.
DetailSupport runs 24 hours a day, every day of the year, for end users and for the platform. Vendor and carrier issues follow the escalation path with named owners.
One on-site badge-access smart locker per site is included. Additional lockers at a site are quoted, and Surya Critical devices are quoted separately.
/ Site modules
The plant modules under the physical layer.
Office and engineering workstations
Standardized computing for administrative and engineering work at the plant.
Engineering application licensing and requirements are qualified.
Floor and line PCs
Supported configurations for the computers that sit on the floor and beside the line.
Enclosures and environmental requirements are confirmed per location.
HMI and PLC support layer
The computing and network layer that supports HMI and PLC systems.
Surya covers the computing that supports production equipment, not the machine.
Label printing
Supported label printers and defined configurations for plant workflows.
Specialty label workflows and application dependencies require qualification.
Plant connectivity
A defined plant network configuration and agreed support scope.
Carriers, network appliances and failover configurations are scoped case by case.
Badge and time clock
Supported badge readers and time clock endpoints on standard configurations.
Access control and payroll applications stay with their owners.
Final module selection, supported integrations and service scope are confirmed before deployment.
/ When something breaks
Obviously dead: straight to the locker. Might come back: a 30-minute restoration window, then the locker.
Surya provides, installs, owns and operates the locker. The customer purchases and owns the replacement devices inside it. Surya replenishes used inventory the next business day. Backup inventory sits at the Surya RTP distribution center.
/ The boundary
The computing that supports production, not the machine.
Surya covers the computing that supports production equipment, not the machine. OT security software is on the customer's paper - Nozomi, Claroty or the customer's choosing - and can be deployed and folded into the runbooks.
Systems outside the standard are still possible. Clinical applications, production systems, and medical and OT equipment stay with the team or vendor that owns them today.
Surya defines and operates the supported standard. Clinical and production decisions, business approvals and data authority stay with your organization.
/ Compliance posture
NIST 800-171 aligned handling.
Configuration baselines, access controls, support records, serial-level custody and certified erasure to NIST 800-88 are operated as part of the standard. Handling for manufacturing customers is aligned to NIST 800-171. Compliance remains an organizational responsibility.
/ One published price
$100 per person per month. $5,000 minimum.
$100 per person per month. $5,000 minimum. One locker per site included. Additional lockers and specialized devices quoted separately.
Additional lockers at a site, Surya Critical devices, Azure compute, site openings and deployment events sit outside the seat price and the monthly minimum.
See the price in full →/ How to start
The tenant is the entry point.
Surya takes the Microsoft platform for the whole organization and brings it to the standard by an agreed date. Then sites come onto the standard one at a time.
Bring the organization onto the platform
Surya takes the Microsoft tenant, brings identity, access, device management and the security baseline to the standard by an agreed date, then operates it.
- Tenant review and the agreed target configuration.
- Identity, access, device management and security baseline brought to the standard.
- 24/7/365 support for end users and the platform from the agreed date.
- Device flows and stocking under one operating record.
Access, licenses and dependencies are confirmed before a date is agreed.
Start here →Open or convert a site
Deploy the agreed standard at a new clinic or plant, or at a site ready for change, and use it to validate the modules, the support path and the recovery method.
- Site and dependency review.
- Supported site modules, deployment and staff readiness.
- Security controls, support handoff and documented recovery.
- The same standard for the sites that follow.
Compatibility, implementation scope and availability are confirmed before a date is agreed.
Start here →These are entry points, not product tiers. Security controls, 24/7/365 support and a documented recovery method belong to the standard from the moment it is in service.
How a scope is qualified.
/ 01
Review the tenant and the sites
The Microsoft platform, site workflows, current technology and application dependencies.
/ 02
Compare against the supported standard
What qualifies for reuse, and what must be replaced, excluded or separately qualified.
/ 03
Confirm dependencies and responsibilities
Identity, network, access, licenses and the named owner for each retained system.
/ 04
Agree the scope and the dates
The platform target, the site modules, the support path and the sequence for the first site.
Qualification is a bounded step before deployment, not a consulting engagement or an audit opinion.
Put a locker on our wall.
Bring the tenant, the site list and the applications each location depends on.