07
Architecture
Sigma in the cloud. Your systems stay yours.

Sigma runs as a cloud service and connects securely to your environments, with no agents to install. Every action is authenticated, authorized and recorded.
Your teams
IT operators and admins
SSO (Azure AD, Okta)
Role-based access
Approvals
Sigma cloud
Cloud service · agentless · no code
Running
Builds
Modules
Orchestration
AI engine
ITSM
Scripts
BYOK
Audit trail
RBAC
Public cloud
Azure · AWS · OCI
Hosts
VMware · Hyper-V · Nutanix
Virtual machines
Windows and Linux fleets
Apps and services
VDI, ITSM, DevOps tools
Your teams
Flexible, secure connections · no agents
Your environments
Secure by design · zero-trust governance
Data sovereignty and audit readiness, without slowing automation down.
Customer-controlled encryption
Bring your own key. Sigma integrates with Azure Key Vault or on-premises HSMs, so you keep exclusive control over data access.
Identity-first perimeter
Native SSO with Azure AD or Okta. Every action, from patching to provisioning, is authenticated, authorized and tied to a user.
Immutable audit trails
Every configuration change and script run is logged with tamper-proof detail, for instant who-what-when reporting in SOC 2 and PCI-DSS audits.
Next step
Pick one team, one high-value workflow, and measure what changes.
01
Time to first value
02
Teams enabled
03
Hours saved