For IT & platform teams
The business operations interface for your Azure agent stack.
Run your agents on Microsoft Foundry or as Claude Managed Agents. AMC manages both the same way. It is built on Azure and designed to integrate with the Microsoft agent stack: Agent 365, Microsoft Foundry, Entra, App Insights. It gives your stakeholders the controls they need to operate an agent workforce. No parallel stack. The management plane stays in your tenant.
One layer is new. The Azure platform is already in your tenant.
T+00 · Tenant resident · No parallel stack
Section 01 · Native
Built on the primitives your team already runs.
AMC isn’t a platform we ask you to host alongside Azure. It’s built on the same Azure services your platform team is already standardizing on. There’s nothing in this stack your team hasn’t seen before, except the management layer on top.
AMC is designed to integrate with Agent 365 so your agents stay first-class Microsoft objects, not proprietary AMC objects. Portable, inspectable, and they keep running whether AMC is in front of them or not.
AMC orchestrates agents deployed via Foundry, including those using your own fine-tunes. AMC doesn't proxy model calls or route them through our infrastructure.
Entra is the most common choice and a first-class integration: SSO, conditional access, role-based authorization out of the box. AMC also supports the identity provider your team already uses.
Every agent run, every step evaluation, every intervention streams to the same telemetry pipeline your platform team already monitors. No black-box dashboard you can't query.
All credentials and configuration live where they belong.
Agent execution runs in session-isolated containers inside your subscription.
Your private endpoints, your firewall rules. AMC deploys behind your existing network controls, not around them.
Nothing in this stack is new to your team. AMC is the one layer they haven’t seen before, and it sits cleanly on top of everything they already operate.
Section 02 · Residency
Deployed into your Azure subscription, not ours.
AMC is a tenant-resident deployment. Foundry agents execute inside your Azure environment, against your data, using model deployments you control. Claude Managed Agents run on Anthropic’s infrastructure and report to AMC. The management plane runs in your subscription. We don’t host your workload, proxy your inference, or store your operational data on our infrastructure.
Every governance, residency, and compliance posture you’ve built for Azure carries over without modification.
Agent execution stays in your tenant.
Agent 365 runtime, your Foundry deployments, your Container Apps: all inside your subscription boundary.
AMC's data stays in your environment.
AMC's logging and evaluation happen in your tenant, and Foundry agents run inference there too. We don't see, store, or proxy your operational data.
You own the underlying resources.
SQL, Blob storage, identity, billing: all yours, all visible in the Azure portal you already use.
Bring your own model deployments.
AMC orchestrates agents that use the Foundry deployments you've approved, including your own fine-tunes. If you've restricted a model, AMC respects the restriction. Claude Managed Agents run under AMC too, with the same queue, budgets, and rubrics.
Section 03 · Deployment
Into infrastructure you already run.
AMC deploys through standard Azure mechanisms into a subscription you control. Your existing Azure governance, cost controls, and DevOps pipelines apply automatically.
Provisioned via Bicep, Terraform, or Container Apps templates
Into your subscription, with reference IaC available for review by your platform team.
Secured network architecture by default
Front-end, backend, and orchestrator behind a reverse proxy with private networking between components.
Repository policies on day one
Branch protection, required reviews, and policy-controlled merges, applied to AMC's own deployment artifacts.
Reference architecture available
Full diagram and deployment guide for your platform and security teams to review before you commit.
Section 04 · Security
The hard parts of multi-agent runtimes, handled.
Running an agent workforce raises real security questions: How are sessions isolated? How is service-to-service traffic authenticated? Where does the audit trail live? AMC answers these with Azure-native primitives, not bolt-ons.
When your CISO asks where the data is, where the audit trail lives, and how isolation works: the answers point to Azure services they already trust.
Session-isolated execution
Each agent run executes in an isolated Container Apps session. No cross-session state, no shared runtime to harden separately.
Authenticated service-to-service traffic
Communication between AMC and the agent runtime is authenticated and signed.
Full audit trail in App Insights
Every step (input, output, evaluation, intervention, override) is logged in the observability stack your security team already monitors.
Customer-controlled telemetry
All logs live in your tenant, queryable through tools your team already uses.
Section 05 · Boundary
What’s Microsoft, what’s AMC, and why both.
Microsoft has built an excellent agent platform. The runtime, models, identity, and observability are all there, and they’re all good. What’s missing is the layer that makes the whole thing operable by the business.
- Agent runtime (Agent 365)
- Models and orchestration (Microsoft Foundry)
- Identity (Entra)
- Observability (App Insights, Log Analytics)
- Secrets management (Key Vault)
- Compute (Container Apps)
- Networking and security primitives
- Department-level workforce views
- Budget controls and override authority
- ROI calculation and reporting
- Workflow and intervention management
- Integrations with ServiceNow, HubSpot, Salesforce, Teams
- The dashboards and policies your non-technical stakeholders need
- The layer that makes the whole thing operable by the business
Section 06 · FAQ
Questions your team will ask anyway.
Yours. AMC deploys into your Azure subscription. Agents execute in your tenant, against your data, using your model deployments.
It stays in your tenant. AMC doesn't proxy, store, or transmit your operational data outside your environment.
Yes. AMC uses your Foundry deployments directly, including any fine-tunes you've published. If you've restricted a model, AMC respects the restriction.
Entra is a native option and the most common choice: SSO, conditional access, and role-based authorization work out of the box. If your team uses a different identity provider, AMC supports that too.
Your agents are standard Agent 365 and Foundry artifacts. Your workflow definitions and skills live in your repos. Your run history is in Log Analytics. Turn AMC off and the workforce keeps running on Azure. You lose the management plane, not the agents.
Yes. Claude Managed Agents sit alongside your Microsoft Foundry agents in AMC: one intervention queue, cost per unit of work, department budgets, and rubrics for both. The developer docs cover how to connect a Claude agent.
Those are developer and configuration tools. They're how you build and deploy agents. AMC is the business operations layer on top, built for department heads, finance teams, and ops managers, not developers.
AMC is built entirely on Azure-native primitives. Partner positioning available on request.
You install it from Microsoft Marketplace into your own Azure subscription. The deployment guide lists every step and what each one needs.
See it run
in your stack.
Bring your platform engineers and security team. We’ll show how AMC deploys into your Azure tenant, where the data flows, and how it connects to Foundry, Entra, and App Insights. Your questions. No slides.