Microsoft
We help companies and SMBs in Mexico buy Microsoft through an authorized channel, configure it properly from day one, and run it month to month: identity, devices, collaboration, security, and hybrid cloud.
What we cover
Microsoft
Microsoft 365, Teams, SharePoint, and OneDrive organized around how your company works.
Microsoft
Entra ID as the single identity, managed devices, and threat protection.
Microsoft
On-site and cloud servers, managed and protected from a single console.
Microsoft
A tenant ready for Microsoft 365 Copilot, without oversharing.
How to start
Fixed scope and written deliverables; then monthly operation if it suits you.
We review MFA, Conditional Access, admin accounts, devices, and Secure Score, and deliver a plan prioritized by risk.
Get a quote →Mail, files, and calendars with a cutover plan, user communication, and day-of support.
Get a quote →Permissions, labels, and a measured pilot before buying licenses for everyone.
Get a quote →Joiners and leavers, licenses, updates, Defender alerts, and user support with a named contact.
Get a quote →In-house
Entra ID
Our internal applications sign in with Entra ID and Conditional Access.
Azure Arc
Our on-site servers are onboarded to Azure Arc with Microsoft Defender.
Key Vault
Credentials and certificates live in Azure Key Vault, one vault per application family, each with RBAC authorization and purge protection.
Managed Identity
Managed Identity on our servers and certificate-based service principals where it isn't available; no static client secrets in production.
Intune
Every company endpoint is enrolled in Intune, and admin roles require a compliant device.
Config as code
Entra ID and Intune settings are version-controlled as code, reviewed before they apply, and monitored for out-of-band drift.
OIDC
GitHub Actions signs in to Azure through OIDC federated credentials, not a stored client secret.
Microsoft 365
Exchange Online, Teams, and SharePoint are our everyday work platform.
Microsoft
We quote Microsoft 365, Windows, Windows Server, and Azure subscriptions through wholesale distributors. We invoice as Baux & Co with Mexican CFDI, consolidate renewals, and advise on SKUs so you don't overpay for licenses.
Process
We understand needs, fleet, budget, and constraints of each client.
Architecture, equipment/SKU selection, and implementation plan.
Procurement, configuration, development, testing, and documentation.
Go-live, store publishing when applicable, and ongoing support.
FAQ
Through wholesale distributors. We invoice as Baux & Co with Mexican CFDI, consolidate renewals, and advise on SKUs so you don't overpay for licenses.
No. We work through delegated access with minimal roles and an expiry (for example, GDAP in Microsoft 365), and we revoke our access when each project closes.
With the Microsoft 365 security assessment: we review MFA, Conditional Access, admin accounts, devices, and Secure Score, and deliver a plan prioritized by risk.
Yes. We review permissions and oversharing, apply baseline labels, and run a measured pilot with a user group. Copilot licenses are quoted separately.
No. Your company's data is never used to train AI models.
Tell us how many users, sites, or applications you have and what you want to solve. We reply with a written scope and quote.
