Case Studies — Baux & Co | Microsoft and Cloudflare

Case studies

Real projects, presented by industry and without the client's name for confidentiality.

Manufacturing · Aluminum foundry · Puebla

An industrial plant with identity-based access and servers under control

A round-the-clock foundry needed production, quality, and office staff to use their systems inside and outside the plant, without exposing servers or sharing passwords.

Microsoft 365
Entra ID
Azure Arc
Microsoft Defender
Cloudflare Access
Cloudflare Workers
D1

Challenge: Plant systems on local servers, remote access that was hard to control, and servers without central inventory or updates.
Solution: Entra ID as the single identity, with Conditional Access
Internal applications behind Cloudflare Access, authorized by Entra ID group
On-site Hyper-V servers onboarded to Azure Arc with Microsoft Defender
New plant apps (quality, dashboards, attendance) on Cloudflare Workers and D1
Outcome: One sign-in for internal applications
Server inventory, updates, and security alerts in one console
New apps that run at the edge, outside the plant network

Hospitality · Short-term rentals · Panama

Rentals managed remotely, with fast sites and secure access to every unit

A rental operator manages apartments from another country and needed direct-booking sites, a guest portal, and remote control of the equipment in every unit.

Cloudflare Workers
Cloudflare Tunnel
Cloudflare Access
R2
Entra ID

Challenge: Equipment in every apartment (climate, shades, cameras) that had to be managed remotely without exposing the network, and a portfolio record each partner should see only in part.
Solution: Bilingual sites and a guest portal on Cloudflare Workers
Remote access to each unit's automation through Cloudflare Tunnel
Private portfolio record with per-zone authorization: Cloudflare Access by path and Entra ID group
Configuration backups in Cloudflare R2
Outcome: Remote management with no VPN or public IP at the apartments
Sites served from Cloudflare's global network, fast from any country
Each partner sees only their part of the record

Corporate services · Multi-company group · Mexico

Internal tools for several companies, with no servers to maintain

A group of companies needed shared tools (tasks, people, reporting) with data separated per company and a single sign-in.

Cloudflare Workers
D1
Cloudflare Access
Entra ID
Azure Key Vault
Workers AI
AI Gateway

Challenge: Different tools in each company, spreadsheets and ungoverned access, and dedicated servers for small applications.
Solution: Multi-company applications (React and Hono) on Cloudflare Workers and D1
Sign-in with Entra ID; every application behind Cloudflare Access
Secrets in Azure Key Vault and continuous deployment with GitHub Actions
AI assistants through Workers AI and AI Gateway, with rules on which data may leave
Outcome: No servers to maintain for internal applications
One sign-in for the group, with access by company and role
AI model calls logged and with visible cost

Client names are omitted for confidentiality. We can walk through the technical detail on a call.

Sounds like your situation?

Tell us what you want to solve and we'll explain how we'd do it, with scope and a quote.