Executive Summary
Connected Data helps organisations unlock deeper insights and smarter decision-making by connecting a wide-range of credit, contact and property datasets and integrating results via the optimal method for the Customer. As its AWS footprint grew, the company needed to demonstrate strong cloud governance and on-going industry best practices without increasing headcount or allowing third-party access to Customer data. Working with Logicata, an AWS Advanced Partner, Connected Data implemented a secure AWS Organization with permission boundaries that enable full infrastructure management without any access to Connected Data customers’ data, within an ISO 27001 compliant environment.
Customer Overview
Customer: Connected Data
Industry: Multi-sector Data & Analytics
Location: United Kingdom
Connected Data is pioneering the wider and more effective deployment of data across the entire debt management lifecycle. Through advanced data solutions, analytics, and AI capabilities, the company helps organisations reduce, resolve, and prevent debt.
The data Connected Data processes is sourced from or handled on behalf of Customers operating in highly regulated sectors. As a result, its cloud platform must meet strict expectations around security, governance, resilience, and auditability — including operating within an ISO 27001 compliant environment.
Challenge
Regulated Customers expect Connected Data to demonstrate that its AWS environment is properly governed: with identities locked down, environments separated, backups verified, and security findings acted on.
At the same time, Connected Data’s contracts with Customers and data suppliers explicitly restricted third-party access to sensitive data. Any external partner supporting the AWS environment would need to manage infrastructure without seeing the data running on it — a constraint that ruled out most managed service providers.
Building an in-house AWS operations team to meet these requirements would have meant hiring specialists in security, networking, and compliance — diverting investment from Connected Data’s core data and analytics innovation. The company needed a partner with deep AWS governance expertise who could work within strict data-access boundaries.
Solution
Connected Data selected Logicata, an AWS Advanced Partner, to design and operate a secure, governed AWS management platform. Logicata’s AWS Cloud Operations Management Competency — validated through an independent third-party audit — provided the operational maturity and credibility required for this engagement.
Secure AWS Foundation with LogiZone Landing Zone
Connected Data’s AWS environment is built on a well-architected Landing Zone: a secure, multi-account structure aligned with AWS best practices.
This foundation delivered:
- Centralised account and policy management via AWS Organizations
- Separation of environments and responsibilities across accounts
- Consistent governance guardrails enforced through service control policies
- Tamper proof audit trail and log files
- A scalable platform for future growth
Permission Boundaries Enabling Data-Isolated Operations
A permission boundary model was collaboratively designed to enable infrastructure engineers to provision and manage AWS infrastructure, maintain security controls, and respond to operational issues — without accessing application data or sensitive workloads.
Key aspects of this model:
- Permission boundaries designed collaboratively and reviewed by both parties
- Full ownership and control of boundaries retained by Connected Data
- Clear separation between infrastructure operations and data handling
This approach allows Connected Data to benefit from expert AWS managed services without breaching contractual agreements or exposing sensitive Customer data.
InfrAssure Managed Services for Continuous Governance
With the permission model in place, Connected Data adopted Logicata’s InfrAssure AWS managed service for ongoing AWS operations.
Through InfrAssure, Logicata provides:
- Continuous monitoring of AWS infrastructure and security posture
- Proactive identification and remediation of critical vulnerabilities
- Oversight of backup, resilience, and platform availability
- Datadog integration for real-time system health and performance insights
- Access to experienced AWS engineers operating within defined permission boundaries
Audit-Ready Reporting
To support customer assurance requirements, Logicata delivers monthly service reports consolidating infrastructure and security information into a clear, auditor-ready format. Reports cover identity and access management reviews, security findings and remediation status, backup compliance, and operational activity — providing Connected Data with consistent, repeatable evidence without manual data collection.
Results
Secure Third-Party Operations Without Data Access
The permission boundary model enables Logicata to manage Connected Data’s AWS infrastructure while sensitive data remains fully controlled by Connected Data — satisfying contractual requirements and strengthening customer trust.
“The permission boundary model lets us benefit from Logicata’s AWS expertise while retaining full control over our data and contractual obligations.”
Antony Dear, Connected Data Director – Product & Delivery
Improved Governance and Audit Confidence
The AWS Organization structure, combined with managed services and monthly reporting, improved Connected Data’s ability to demonstrate governance and operational maturity to customers and auditors.
“Our proactive reporting and managed service approach gives us continuous visibility into our AWS environment and simplifies customer assurance.”
Antony Dear, Connected Data Director – Product & Delivery
Broader Expertise at Lower Cost
The InfrAssure managed service provides access to a team of AWS-certified engineers for a cost comparable to a single full-time hire. This gives Connected Data depth and breadth of expertise, improved service continuity, and reduced key-person risk — with a predictable monthly cost.
Scalable Platform for Continued Growth
With a secure AWS Landing Zone and expert operational support in place, Connected Data has a well-governed AWS platform supporting continued expansion of its data, analytics, and AI services.
AWS Services and Technologies Used
- Amazon Web Services (AWS)
- AWS Organizations
- LogiZone AWS Landing Zone
- Datadog
About Logicata
Logicata is an AWS Advanced Partner holding the AWS Cloud Operations Management Competency, validated through an independent third-party audit. Logicata helps organisations build and operate secure, well-governed cloud platforms on AWS, enabling customers to reduce operational risk, meet assurance expectations, and scale with confidence.
