Azure-Hosted Business Management SaaS

Azure-Hosted Business Management SaaS overview

This is a multi-tenant business management platform we built and host on Microsoft Azure for pre-release facilities: residential centres where residents complete screening, enrolment, assessment and treatment programmes under strict compliance frameworks. The software has been in continuous operation since 2008; our engagement re-platformed it onto Azure while preserving the business rules accumulated over that time. It now serves six major United States centres and more than 300 active clients a year.

The work represents over 100 man-months of development delivered by a six-person team: one project manager, three developers, one QA specialist who built the automated test routines and one UI/UX designer who produced the responsive front end. The platform covers the resident lifecycle end to end, from initial screening and structured enrolment through assessments, behavioural treatment groups, scheduling, attendance, financial activity and secure sign-in and sign-out logs.

Challenge in Corrections & Rehabilitation operations

Pre-release facilities operate around the clock, 365 days a year, and every resident movement, transaction and assessment must carry an audit trail and be reportable instantly. The system we inherited ran on rigid, locally hosted setups. Cross-database coordination was slow, synchronisation between the central database and site installations lagged, and user interfaces were hardcoded, so opening a new geographical site meant extensive custom coding. Paper forms still carried much of the daily workload.

The mandate was to move the estate onto cloud-native Azure components without breaking decades of field-tested business logic, remove the performance bottlenecks in data integration, replace paper with configurable web forms, and satisfy SOC 2 Type II, HIPAA and GDPR controls, because assessments and treatment records contain protected health information.

Solution architecture & delivery

We rebuilt the platform as an N-tier application with an MVC repository pattern. The presentation layer uses ASP.NET MVC with HTML5, CSS3, JavaScript, jQuery and Bootstrap and adapts to desktop monitors and tablets. It exchanges JSON with an ASP.NET Web API middle tier written in C#, which hosts the business logic and a configurable rules engine. Data access goes through Entity Framework in a database-first configuration, with strongly typed models generated from the migrated Azure SQL Database schema; controllers never issue SQL directly, so every write passes through a single validation loop. Hosting runs on Azure App Services and Azure Virtual Machines.

Synchronisation between the central database and localised client-side installations happens inside SQL Server itself. We wrote custom C# assemblies and deployed them through SQL Server CLR integration, so change-tracked rows are bundled into compact binary streams within the database process instead of pulling millions of rows into an application server. The assembly transmits the packages to the Azure Web API endpoints as JSON, and every request and response is written to a sync log screen with Swagger built in, which developers use to confirm complete delivery.

Forms are not hardcoded. An XML-driven engine reads layout files to decide which inputs, text areas, dropdown lists and validation rules to render, and administrators can add fields or change an assessment flow by editing the schema, with Ajax and jQuery redrawing the interface immediately. Parsed definitions for all 100+ forms are cached in memory at start-up, so pages load quickly even on low-bandwidth facility connections. The same definitions drive document output: through the Open XML SDK the application merges database records into MS Word templates on the server, producing editable admission summaries and assessments without Word installed on the web tier. SQL Server Reporting Services generates the KPI summaries and compliance exports.

The financial module is a double-entry micro-ledger connected to the scheduling and sign-in/sign-out engines. When a resident checks out for a work-release assignment, the tracking entry signals the ledger to calculate any transit or administrative costs, and both the resident balance history and the facility master journal update in one isolated transaction or roll back together. Security runs at every layer: TLS 1.3 on all App Service routes, short-lived session tokens carrying encrypted facility claims, Transparent Data Encryption with AES-256 across all Azure SQL instances with master certificates held in Azure Key Vault, tenant keys enforced by Entity Framework global query filters, and an immutable audit table that records user, UTC timestamp, workstation IP and an encrypted before/after snapshot for every read, write or delete of a client record, case note or financial entry.

Releases flow through Azure DevOps. A commit triggers the build and unit tests, an isolated staging environment is provisioned, a Selenium suite drives a headless browser through the 100+ forms, and only a clean pass swaps the production deployment slot, so updates ship without downtime. App Service plans scale out when average CPU exceeds 70 percent for more than five minutes, which typically happens during the morning sign-out rush, and scale back once usage falls below 40 percent. Azure SQL active geo-replication keeps a readable secondary in a separate region ready to take traffic if the primary region fails.

Key features of the Azure-Hosted Business Management SaaS

• Screening and intake automation that evaluates incoming data against configurable facility eligibility rules
• Enrolment and assessment pipelines recording client demographics, historical records and psychological evaluations
• Rich-text case notes and treatment-group tracking with group counselling attendance and progress trackers
• Real-time scheduling and attendance matrices with secure sign-in and sign-out tracking logs
• Double-entry financial micro-ledger for resident transactions, restitution payments and institutional fee balances
• XML forms engine with over 100 administrator-configurable web forms and MS Word data merge through the Open XML SDK
• SQL CLR synchronisation between central and site databases, verified through a Swagger-backed sync log screen
• SSRS reporting for customisable KPI summaries and visual compliance exports

Who this platform is for

The platform is for operators of pre-release and community corrections centres that need one system across several sites: intake staff running screenings, case managers writing notes and running treatment groups, front-desk officers logging resident movements, finance staff maintaining resident ledgers, and administrators who need to change forms and rules without raising a development ticket. The same multi-tenant design suits any institutional operator that has to satisfy SOC 2, HIPAA and GDPR auditors to keep state and federal contracts.

Impact & results

• Locally hosted legacy setup migrated to Azure SQL Database and App Services with the business rules of a system running since 2008 preserved
• One multi-tenant deployment serving six major US centres and over 300 active clients a year
• Paper-reliant processes replaced by more than 100 configurable web forms with editable MS Word output
• Synchronisation between central and site databases reduced from minutes to fractions of a second through SQL CLR routines
• Zero-downtime slot deployments gated by Selenium regression runs, with geo-redundant failover limiting potential data loss to a few seconds
• Immutable audit trail and Transparent Data Encryption aligned to SOC 2 Type II, HIPAA and GDPR controls

FAQ about the Azure-Hosted Business Management SaaS