A platform you own, hosted in Australia, from under US$100 a month
Most builds do not need a landing zone. For councils, strata businesses and schools, a lean managed stack is cheaper, faster to stand up, patched by the vendor, and stronger than most of them run today. When classification, assurance or integration depth demand it, the same team delivers into your own Azure or AWS tenancy.
The lean stack
Used for Build Core and Build Integrated, provisioned in your accounts. On published list prices, a Core build runs at about US$45 to US$60 a month before usage; with a firewall and moderate traffic, under US$100 is a realistic budget line. A minimally compliant hyperscaler landing zone with an app service, a database and monitoring runs to several hundred dollars a month before any application code is written.
| Layer | Service | Australian hosting position |
|---|---|---|
| Application and edge | Cloudflare Pages and Workers, or Vercel | Global edge delivery. Application functions can be pinned to Sydney on Vercel. Sensitive data is never kept at rest in Cloudflare storage products. |
| Data, identity, storage | Supabase: Postgres, Auth and Storage | Project provisioned in Sydney (ap-southeast-2). Daily backups. SAML single sign-on for staff; multi-factor authentication for customers. Row-level security so the data model enforces who sees what. |
| Security front door | Cloudflare DNS, WAF, Access and Turnstile | Managed firewall rules, bot protection and admin-only access policies with no servers to patch. |
| Delivery | Git, infrastructure as code, CI | Everything reproducible from a repository you own. Preview environments for every change. |
Supabase's SOC 2 Type 2 and ISO 27001 attestations apply on its higher plans; where a client requires them, the project is placed on that plan or the build moves to Enterprise. Platform prices are vendor list prices in US dollars and exclude usage overages and GST.
What IT gets to sign off
Identity done properly
SAML SSO to Entra ID or Google Workspace for staff. MFA-backed accounts for residents, owners and parents. Roles enforced in the database, not only in the interface.
Security and governance IT will sign
Edge WAF, vendor-managed patching, TLS by default, secrets in platform vaults, monitoring from day one, and documentation IT can audit. Controls are mapped to the Essential Eight.
Integrated with what you already run
Patterns for TechnologyOne, Civica, Pathway, StrataMax and similar platforms, exposed through governed APIs rather than point-to-point scripts. Where no API exists, an export-based approach is designed and priced instead.
Ownership without lock-in
Accounts are created in your name with your billing; Cloud Paradigm is a team member. Postgres and standard web frameworks port to Azure or AWS if you outgrow the stack.
When a build belongs in your own tenancy
Build Enterprise runs in your Azure or AWS environment, designed and delivered by the same principal who runs the lean-stack work. The hyperscaler capability is held in reserve as the escalation path, and it is the reason IT can trust the supplier. Move to Enterprise when any of these apply:
- Data classified OFFICIAL: Sensitive or PROTECTED, or an IRAP-assessed hosting requirement
- Mandatory use of your existing landing zone, private connectivity or on-premises integration that cannot be exposed through a governed API
- High-availability or regulatory obligations, for example in health or utilities, that require your own audit trail over infrastructure
- Existing Microsoft or AWS commercial commitments you want to consume
Architect-led, whichever platform
Every build is designed by a Principal Consultant with more than twelve years at Microsoft. Identity, security baselines, data placement and cost governance are first-class on both tracks, not bolted on.
The IT-readiness workshop, the integration feasibility review and the security and identity position paper are part of Sprint Plus, so your team sees the platform position before any Build is quoted.
This website is the first reference build on the lean stack: Astro on Cloudflare Pages, Pages Functions for the forms, Supabase in Sydney, Turnstile at the edge, and a content security policy with no inline scripts. Ask us about it.
Want the platform position paper for your environment?
It is produced in Sprint Plus, after an Opportunity Review has found a journey worth proving.