/ Technology infrastructure for physical operations that cannot stop.
Start with Standby. Add Endpoint, Fabric, or both.
The relationship starts with Surya Standby: prepared replacement equipment for the classes in scope, built to the configurations you already run. Surya Endpoint and Surya Fabric are added on top of it when you need the deeper managed scope, and Surya Foundation is Standby, Endpoint and Fabric together. Surya installs, operates and restores the purchased scope to its defined standard. Your team owns its business applications, workflows and decisions.
/ What you can buy
Start with Standby. Add Endpoint, Fabric, or both.
Each product is a complete, operated capability with its own acceptance tests. Standby is where the relationship starts and is complete on its own. Endpoint and Fabric are added on top of it, independently, in either order or together, at the outset or later. Surya Control is included with Endpoint and Fabric and is never a separate purchase.
Surya Standby is where the relationship starts and is a complete product on its own. Surya Endpoint and Surya Fabric are independent additions on top of it, in either order or together, at the outset or later. Surya Foundation is Standby, Endpoint and Fabric together. Surya Control is included with Endpoint and Fabric, is never a separate purchase, and is not used by Standby on its own.
Surya Standby
Standby
Protect revenue and customer commitments by keeping your sites working when critical equipment fails.
Prepared replacement coverage for the equipment classes written into scope. Surya captures your existing configuration for each agreed role or equipment type and prepares replacements to it: workstations in a branded Surya Smart Locker at the site, qualified network and site equipment in an existing secure room or cage outfitted with Surya RFID, staged on site or shipped from the Surya facility in Research Triangle Park, with authorized issuance recorded against the serial number, returns and certified erasure, readiness checks and replenishment.
- Resilience
- Keep equipment failures from becoming prolonged business interruptions.
- Security
- Keep covered equipment in authorized hands, with custody documented through issue, return, and disposition.
Surya Endpoint
Endpoint, Standby and Control
Make your people productive from day one and keep control of company access and data through every hire, role change, and departure.
Identity, provisioning, configuration, protection, approved applications and protected-data recovery, including implementation and ongoing maintenance of Windows Autopilot v2, Intune and Microsoft Zero Trust configuration to Surya standards and your agreed business requirements, with a prepared working replacement at the site so the physical operation resumes without waiting for a technician to source and build equipment.
- Resilience
- Keep people productive through hiring, device failure, and recovery.
- Security
- Protect company access and data as people join, change roles, and leave.
Surya Fabric
Fabric, Standby and Control, with OT and CPS security where applicable
Keep every location operating securely and at full speed, with network capacity and resilience that support your growth.
Surya provides the complete network system for the agreed sites: Surya supplies the equipment and its standard configuration, installs and tests it before operation, then operates and maintains the agreed network - approved edge, switching, wireless, segmentation, connectivity and a tested recovery procedure, extended to operational and cyber-physical systems through the Claroty integration where that layer is in scope.
- Resilience
- Keep locations connected and make network recovery predictable.
- Security
- Control which systems can connect and limit the spread of threats across the site.
Surya Foundation is Standby, Endpoint and Fabric together.
Surya Foundation operates Standby, Endpoint and Fabric together under one operating standard, with Surya Control operating the supported state and the security capabilities included in the purchased scope.
Surya Control is not sold separately. It is the operating layer included with Endpoint and Fabric, and it is what makes the standard hold. Standby on its own does not include it.
Surya Standby is where the Surya relationship starts, and it is a complete product on its own. Surya captures the configurations you already run and prepares replacement equipment to them, so the physical operation resumes without waiting for a technician to source, build and deliver equipment. It is not a trial, an advisory retainer or a teaser, there is no mandatory period and no mandatory upgrade.
Surya Standby is the standalone base of the relationship. Surya Control is included with Endpoint and Fabric. OT and CPS security sits within Fabric where the supported scope includes it.
- Resilience
- Keep equipment, people and site networks recoverable under one operating standard.
- Security
- Protect equipment custody, company access and site connections together.
Standby, Endpoint and Fabric each support automated reporting to Vanta, so Foundation reports across all three products for the agreed scope. Vanta reporting →
/ Purchasable product - Surya Standby
Protect revenue and customer commitments by keeping your sites working when critical equipment fails.
Prepared replacement coverage for the equipment written into your scope, whatever class it is. Surya captures your existing configuration for each agreed role or equipment type and prepares replacements to that agreed configuration through its supply chain. Where workstations are in scope they are held in a branded Surya Smart Locker at the site; qualified network and site equipment such as switches, firewalls, access points and edge appliances is held in an existing secure onsite room or cage outfitted with Surya RFID, staged on site or shipped from the Surya facility in Research Triangle Park, with authorized issuance, returns, readiness checks and replenishment, so a working replacement is ready before it is needed.
Included behaviour
- Your existing laptop image and configuration captured per employee persona or role, and replacements prepared to that agreed configuration
- The same principle for qualified switches, firewalls and other agreed critical equipment: existing configuration captured, ready replacements prepared
- Workstations and peripherals held in a branded Surya Smart Locker at the site, accessed with your existing corporate identity
- Qualified network and site equipment held in an existing secure room or cage outfitted with Surya RFID, retrieved by designated staff
- Equipment outside the locker tracked in place with Surya's own RFID and labelling gear, including in locked server rooms
- Authorized issuance recorded against the serial number
- Returns, repair routing, certified erasure to NIST 800-88 and retirement
- Readiness checks and replenishment
- A swap runbook the person at the site follows
- Resilience
- Keep equipment failures from becoming prolonged business interruptions.
- Security
- Keep covered equipment in authorized hands, with custody documented through issue, return, and disposition.
Standby supports automated reporting to Vanta for its agreed equipment and handling scope.
The evidence listed illustrates the product's contribution; the configured reporting scope determines which records are transmitted automatically. Vanta licensing, connection scope, reporting details and any third-party assessment fees are confirmed in the commercial scope.
- Required dependencies
- The customer purchases and owns the devices, including the prepared replacements. Where workstations are in scope, Surya provides, installs, owns and operates the locker; where the scope is network equipment, an existing secure onsite room or cage is outfitted with Surya RFID. The agreed configurations to reproduce, the identity integration, access permissions and approvals the replacement workflow needs, and installation, field response and replenishment coverage are confirmed for the proposed sites during qualification.
- Explicit exclusions
- Supported equipment and published logistics terms, not unlimited procurement. A prepared replacement covers device failure, not an application outage, an identity outage, a power loss or every network fault. Standby prepares, stocks, swaps and tracks the replacement equipment. Ongoing standardization and administration of your production endpoint and network estate is Surya Endpoint and Surya Fabric, and Surya Control is not included with Standby on its own.
- Acceptance test
- A person at the site obtains a working replacement, prepared to the agreed configuration, through the runbook and returns to the defined working state, with the swap recorded.
/ Purchasable product - Surya Endpoint
Make your people productive from day one and keep control of company access and data through every hire, role change, and departure.
Supported identity, endpoint provisioning, Intune configuration, controls, approved applications and protected-data recovery. Autopilot, Intune and Graph are Microsoft functionality; the product is the engineered combination and its verified operation.
Included behaviour
- Identity controls, authentication enrollment and a documented recovery path
- Endpoint provisioning and Intune configuration on the released baseline
- Endpoint protection, encryption key custody and supported updates
- Approved application deployment and supported peripherals
- Defined protected data sets, backup operation and tested restore
- Joiner, mover and leaver handling from the standard input and role catalogue
- Resilience
- Keep people productive through hiring, device failure, and recovery.
- Security
- Protect company access and data as people join, change roles, and leave.
Endpoint supports automated reporting to Vanta for its agreed endpoint and identity scope.
The evidence listed illustrates the product's contribution; the configured reporting scope determines which records are transmitted automatically. Vanta licensing, connection scope, reporting details and any third-party assessment fees are confirmed in the commercial scope.
- Required dependencies
- Supported licenses for each released profile, a supported tenant and identity model, and named access and data owners.
- Explicit exclusions
- A defined Microsoft foundation, not every application or every Microsoft feature. No line-of-business software engineering, business-process redesign or unlimited training. A replacement device is not a backup, and local-only data outside the protected locations is not promised to reappear.
- Acceptance test
- Provision a new supported device; restore an authorized user to the defined working state on a replacement; test account recovery and the denial of an unauthorized recovery attempt; verify approved controls; execute a safe data restore; validate joiner and leaver handling; run a controlled containment exercise.
/ Purchasable product - Surya Fabric
Keep every location operating securely and at full speed, with network capacity and resilience that support your growth.
One defined system for the agreed sites, from equipment through ongoing operation: Surya-supplied edge, switching, Wi-Fi, segmentation and connectivity on one released profile, installed and tested before the site runs on it, then maintained with a tested recovery procedure.
Included behaviour
- Surya-supplied edge, switching and wireless equipment on the standard configuration
- Installation and pre-operation testing of the supplied system
- Segmentation and allowed paths from the shared specification
- Connectivity, with a tested alternate path where the selected profile includes one
- Network inventory, firmware lifecycle and configuration protection
- Replacement of a supported component without the original designer
- Resilience
- Keep locations connected and make network recovery predictable.
- Security
- Control which systems can connect and limit the spread of threats across the site.
Fabric supports automated reporting to Vanta for its agreed site-network scope.
The evidence listed illustrates the product's contribution; the configured reporting scope determines which records are transmitted automatically. Vanta licensing, connection scope, reporting details and any third-party assessment fees are confirmed in the commercial scope.
- Required dependencies
- Site readiness, structured cabling, declared power dependencies, and the customer's carrier accounts.
- Explicit exclusions
- The supported site-network scope written into your agreement, not every system that connects to it. A single connection is not sold as redundant. Site readiness, structured cabling, building power, carrier accounts and carrier repair, and production machinery stay outside Surya's control. Equipment ownership and commercial terms are set out in the written proposal and agreement.
- Acceptance test
- Inventory matches the installation; required business paths succeed; prohibited cross-segment access is denied; the approved configuration can be restored; losing each included path produces the declared result.
/ Operates Endpoint and Fabric - Surya Control
The system that maintains the system.
Customer-dedicated operations compute in Surya's Research Triangle Park facility, with tested automated actions, continuous configuration verification and an explicit exception path.
Included behaviour
- Continuous evaluation of the supported operating state
- Allowlisted, tested routine operations under a standing policy
- Explicit authorization for privilege grants and other high-impact changes
- An exception path when a condition is unknown or unsafe
- Protected evidence for every action and access
Routine operations run from an allowlisted, tested catalogue under a standing policy, so an engineer does not approve every ordinary execution. Privilege grants, destructive changes and broad policy changes require explicit authorization. An unknown or unsafe condition stops the action, preserves the evidence and raises the product exception path. The identities Surya uses live in your own Microsoft 365 tenant, where your administrator can see, audit and revoke them.
Dedicated to you.
Your operations run on hardware assigned to your organization alone, in our Research Triangle Park facility. It is not shared with any other customer. If it fails, your tenant keeps running exactly as before; nothing in your environment depends on it.
Routine analysis of your configuration runs on that dedicated hardware. Where a correction needs to be worked out, the configuration difference and its rationale are processed under terms that prohibit training on or retaining your data. Mailbox content, file content and business-document content are not part of routine infrastructure operation.
Access is through two identities that live in your own Microsoft 365 tenant. Your administrator can see every sign-in, audit every action, and revoke either identity at any time. Surya holds no global administrator role and no delegated partner access to your tenant.
Routine operations run from an allowlisted, tested catalogue under a standing policy, so an engineer does not approve every ordinary execution. Consequential changes require explicit authorization, and an unknown or unsafe condition stops the action, preserves the evidence and raises the exception path.
How it works, in the detail your security team will ask for.
- Required dependencies
- Application identities your administrator consents to and can revoke, and Microsoft Graph permissions tied to the operations actually used.
- Explicit exclusions
- Surya Control operates Surya Endpoint, Surya Fabric and Surya Foundation. It is not used by Surya Standby on its own, and it is never a separate purchase. No arbitrary privileged AI agent and no custom automation built per customer. Dedicated compute does not mean a dedicated facility, power, staff, logging infrastructure or downstream cloud service.
- Acceptance test
- A permitted automated correction is applied and verified; a prohibited action is stopped and raised; the operations appliance is replaced and its working state rebuilt from your tenant.
/ Product support
What product support covers.
Product support is included: a defined support path for supported users, plus supported vendor escalation with named owners. Surya engineers work three shifts, 365 days a year, and the Surya Agent Network takes the first response on 78% of support requests (90 days to September 2026). Response commitments for your scope are set in your written proposal.
Product support covers faults within the scope you purchase. Your written proposal identifies incident priorities, escalation and any field-response coverage for the products you select. Coverage is three shifts, 365 days a year; response commitments are set per scope.
- Backup operation and supported restore execution
- Authentication and account recovery under the documented path
- Supported Microsoft administration inside the released baseline
- Product-security exceptions, containment and restoration of covered components
- Escalation to supported vendors with a named owner
- Faults in the accepted scope, at no consulting fee
Autopilot, Intune and Microsoft Graph are Microsoft functionality. What Surya supplies is the engineered combination, the shared release, the verified operation and the physical recovery around them. Regulatory determinations, legal notification and investigation beyond the product boundary stay with your own authorities or their chosen specialists.
/ Who does what
Surya operates what you purchased. Your team keeps the rest.
Surya
- Product operation across every element the purchased product requires, and nothing outside it
- Prepared replacement equipment, authorized issuance and custody, returns and replenishment under Standby
- Device lifecycle and configuration management where Endpoint or Fabric is purchased
- The defined security and recovery behaviour
- Product faults inside the accepted scope
- Product support and supported vendor escalation
- Release improvements for every customer at once
Your internal IT
- Business applications and their vendors
- AI workflows and process design
- Access and business decisions
- Ongoing production administration wherever Endpoint or Fabric has not been purchased
- Integration with business systems
- Adoption and the results the business wants
Consultants you choose
- Advice or projects you independently decide to buy
- Not required to keep the Surya product running
- Cannot create obligations for Surya
Your IT team and current providers can remain in place. Surya operates and restores the purchased product within its agreed scope.
Your organization and its other providers retain responsibility for business applications, workflows and systems outside that scope.
Surya operates the supported technology foundation. The business, its applications, its AI workflows, access decisions and data authority stay with your organization.