The decision
Running this class of tooling on a hosted instance means a third party operates the system that administers your environments. Self-hosting is more work and it is the correct trade here, because owning the host means owning the credentials, the audit trail, and the upgrade schedule.
Migration
- Deployed the platform to Linux on Azure and migrated the existing configuration without re-consenting every organization.
- Application registration scoped to the permissions actually used rather than the permissive default set.
- Administrative access placed behind identity controls, with the audit trail retained on infrastructure I control.
- Backup and restore path defined and tested, so a bad upgrade is a recovery rather than a rebuild.
Ongoing
Upstream releases are staged and validated before they reach the live instance. Applying updates blind to a system with this reach is not a maintenance policy.