CloudMandate. by JEC Technologies
Cloud governance & optimisation assessment · Microsoft Azure

Your cloud's compliance, security and cost, in one executive scorecard.

Clarity, control and confidence over your cloud environment: every gap evidenced, every Rand of waste priced.

You answer for your cloud. CloudMandate hands you one score that shows exactly where it stands, in language you can take to the board.

Run your first scan free See plans

Read-only access through Azure Lighthouse. Withdraw it at any time.

Cloud governance scorecard Sample
34/100
AT RISK
Sample environment score
Data protectionAt risk
Security postureNeeds work
Operational resilienceDeveloping
Cost governanceWaste priced in rands

Illustrative scorecard, drawn from the sample report.

What our pilots surfaced
Savings
R29,000 / month
saved on R72,000 of assessed monthly cloud spend, ±40%.
Compliance
Data found leaving South Africa
Backups of personal information crossing the border, against POPIA.
Security
29 security gaps identified
critical and high-severity, surfaced across the environment.

Real findings from CloudMandate pilot assessments. Anonymised.

Currently running with six pilot organisations
Manufacturing Professional services Diagnostics Logistics Insurance
See a sample report

One report. Everything your board needs to see.

The verdict up front, the figures in plain sight, every score tied to the standard behind it. Here is a sample, start to finish.

The verdict, page 1static/sample-report-p-01.png
Sample CloudMandate report, page 1: the verdict, scoring a sample environment 34 out of 100 (at risk).
The verdict
Dashboardstatic/sample-report-p-02.png
Sample CloudMandate report dashboard: score gauge, findings by severity, posture by dimension, and top cost-saving opportunities.
Dashboard
What we measuredstatic/sample-report-p-03.png
Sample CloudMandate report: what we measured: data protection, security, operational resilience and cost governance scores explained in plain English.
What we measured

A sample report, start to finish.

What's in the report

Every section is a page you can hand straight to the board, no translation needed.

  • The verdict & your cloud scoreA single score and a plain-English bottom line, tracked every time you re-run it.
  • Where you stand on POPIAWhere your cloud falls short of POPIA, and where personal data is at risk of crossing the border, flagged and evidenced.
  • Security posture, measuredYour security controls scored against recognised international standards (NIST and CIS), so a gap is a fact, not an opinion.
  • Recoverable spend, in randsUnused and oversized resources, and licences you may be overpaying for, each priced in rands. Often more than the assessment costs.
  • Evidence packThe documented backing behind every finding: what you produce when due diligence or the Regulator asks you to prove it.
What it answers

The answers every executive wants about their cloud.

Not the scan. What you no longer have to hope about once the report is on your desk.

Compliance & evidence
"Are we actually compliant, or am I just hoping?"

CloudMandate turns the hope into documented answers, mapped to POPIA, NIST and CIS. When the Regulator, a customer's due-diligence team, or an auditor says "prove it," you hand over the evidence pack, not a shrug. That's the difference between a defensible position and personal liability for the Information Officer.

Cost, quantified
"There's money leaking out of the cloud and I can't see it."

The report prices unused and oversized resources, and licences you may be overpaying for, in rands. In one pilot it surfaced R29,000 a month in recoverable spend, ±40% of the spend assessed. For a CFO, that reframes it from a cost into a rebate.

Board-readable
"I don't have a cloud security specialist to make sense of this."

The report is written for the people who carry the risk, not the people who run the infrastructure. One clear score, in plain language, that the MD and the board can read directly, with every technical term translated into what it means for the business.

Measurable over time
"Is our cloud getting better or worse, and can I show it?"

Every assessment produces the same score on the same scale, so you can track it quarter on quarter. Governance stops being a feeling and becomes a number you can put in front of the board and show improving.

How it works

From access to answers in three steps.

You activate with Deploy to Azure

Sign in and activate through a single Deploy to Azure step. It delegates read-only access to the subscriptions you choose through Azure Lighthouse, Microsoft's standard model for partner access. Nothing is installed, and you can withdraw it at any time.

CloudMandate assesses

The scan runs read-only. We read your cloud against POPIA and recognised international security standards, and price the waste: unused and oversized resources, and licences you may be overpaying for.

Your scorecard, in your dashboard

One clear score, every gap evidenced, and the recoverable spend priced in rands. Your report lands in your dashboard, and you can re-run it any time to show the trend.

static/founder.jpg
John Currie, founder of CloudMandate.

Why we built CloudMandate

We were reviewing a client's cloud environment and found deprecated components, security misconfigurations, and money going out the door on resources nobody was using. None of it was visible to the people accountable for it. That isn't negligence. It's the normal state of an environment that has grown faster than anyone's ability to see it whole.

What I kept hearing from those executives was the same frustration. They were tired of technical jargon they couldn't connect to the business questions they actually needed answered. Is this secure? Are we compliant? Where is the money going? The technology had the answers. Nobody was translating them.

I hold a simple principle: governance before optimisation. You cannot secure, fix, or defend what you cannot see. CloudMandate reads your environment, scores it, evidences the gaps against the standards you are held to, and shows you where the spend is leaking. One document, in language the person carrying the risk can act on, so you are no longer guessing.

John CurrieFounder, JEC Technologies
Who it's for

Built for the people accountable for the cloud.

Four stakeholders feel this problem directly, and CloudMandate is written so each of them can read the same report and get their own answer from it.

MD
The MD or executive
Owns the risk, and the exposure that comes with it.
IO
The POPIA Information Officer
Personally accountable, and needs evidence, not assurances.
CFO
The CFO
Chasing the cloud spend that no one can fully see.
AUD
Internal & external auditors
Need documented, framework-mapped evidence to sign off.
The sweet spot

Built for mid-sized, Microsoft-centric South African organisations, where POPIA creates real accountability, but there's no in-house cloud governance function to answer for it.

Get started

See your own cloud score.

Create your account with your work email, activate read-only access, and run your first scan free. Your scorecard lands in your dashboard.

  • A clear score on your own cloud environment, with every gap evidenced.
  • Your first scan free. Paid plans unlock re-runs and Microsoft 365 add-ons.
  • Just your work email to sign up. No passwords to manage.
Questions

Questions executives ask us.

What access does CloudMandate need, and can it change anything?

Read-only access to the cloud subscriptions you choose, granted through Azure Lighthouse, Microsoft's recommended model for delegated partner access. There is no write path: CloudMandate reads configuration and posture and produces a scorecard, nothing else. You control the scope, and you can withdraw access at any time. Day to day, it changes nothing an executive would ever notice.

Do I need a technical team to make sense of it?

No. The scorecard is written for the people accountable for the risk, not the people who run the infrastructure. One score, plain-language findings, and every technical term translated into what it means for the business.

What about our data and residency?

The assessment reads configuration and metadata (how your environment is set up), not the data inside your workloads. Data handling and residency terms are set out in your agreement before any access is granted.

How do I get started?

Sign up with your work email, choose the free tier, and run your first scan. Your scorecard appears in your dashboard when the scan completes, and paid plans unlock re-runs and Microsoft 365 add-ons. You can see the plans before you start, and there is no commitment.