Governed Active Directory, Entra ID, and Microsoft 365 migration platform with assessment, controlled execution, and audit evidence for enterprise programs.
BridgeAD is an Active Directory migration tool for Microsoft 365, Entra ID, and cloud migrations. Govern AD and Microsoft 365 delivery with controlled execution, or assess cloud estates, design target architecture, and produce defensible plans with BridgeAD Intelligence.
Two Products for Different Migration Responsibilities
BridgeAD Cloud Workloads - Assess, scope, execute, reconcile, and prove Active Directory, Entra ID, Exchange, SharePoint, OneDrive, and Teams migrations, plus any-to-any mailbox moves across Gmail, IMAP, on-premises Exchange, and archives.
BridgeAD Intelligence - Assess cloud estates, compare target designs, verify plans, govern execution, investigate failures, and prepare cited reports.
Mailbox Migration (Any to Any) - Certified routes between Exchange Online tenants, Gmail, IMAP hosts, on-premises Exchange (EWS), and PST/EML archives with resumable delta passes and signed fidelity contracts.
SharePoint and OneDrive - Assessment-backed site and drive scoping with resumable Graph content transfer, conflict handling, version depth configuration, permissions mapping, and delta reconciliation.
Microsoft Teams - Graph reconstruction for team and channel structure, mapped membership, settings, tabs, and tags.
Microsoft Entra ID - Graph-based users, groups, devices, and memberships with collision protection, governed guest invitations, and conditional Intune policy definitions.
Cloud-Native Device Conversion - AD unjoin, Entra join, Microsoft 365 app reset, and BitLocker escrow verification with dry-run-first approach.
IIS and SQL Server Migration - Agent-executed configuration and database moves with preview and confirmation gates.
Operational Phases
Discover - Connect source and destination environments and run read-only discovery. Baseline identity, directory, and workload readiness before scope is committed.
Plan - Build mapping rules, wave strategy, and rollback guardrails. Dry-run validates assumptions and produces a clear execution plan per migration phase.
Execute - Run dependency-ordered jobs with retry, resume, and real-time progress telemetry. Pause, resume, cancel, or retry failed items without losing control.
Verify and Close - Run reconciliation checks, export audit and job reports, and close with governed handover and operational evidence.
Best-Fit Programs
AD forest consolidation
M&A and divestitures
Tenant-to-tenant planning
Regulated self-hosted delivery
MSP migration delivery
Enterprise Operations
Assessment and Reporting - Pre-migration readiness scoring, finding categorization, and exportable reports in CSV, Excel, and PDF formats.
Real-Time Operations - SignalR live dashboards, health checks, metrics endpoints, and alert-ready telemetry for NOC and delivery teams.
API and Automation - Authenticated REST APIs and signed webhook notifications integrating with ITSM, SIEM, and internal orchestration pipelines.
On-Prem Execution Agent - Outbound-only Windows agent with pairing, heartbeat monitoring, command dispatch, and controlled auto-update workflows.
Security
Migration content is streamed from source to destination - no mailbox, file, or message body is persisted at rest in BridgeAD infrastructure. All Microsoft Graph and Exchange traffic uses TLS 1.2+. Secrets are stored in Azure Key Vault (SaaS) or DPAPI-protected local stores (self-hosted). Five-tier RBAC with mandatory MFA for all privileged roles.
Deployment Options
SaaS - Multi-tenant managed service hosted on Azure with region-pinned data residency.
BridgeAD is built and operated by Apqor Technologies Pvt Ltd. The same engineering team that builds the platform handles migration engineering, security review, and support.
Highlights
Governed migration execution with full operator control - BridgeAD provides dependency-ordered jobs with dry-run validation, collision checks, rollback guardrails, pause/resume/cancel capabilities, and real-time progress telemetry. Every migration phase produces inspectable outputs including reconciliation reports, audit evidence, and sign-off exports for compliance and security teams.
Any-to-any mailbox migration plus full Microsoft 365 workload coverage - Certified routes between Exchange Online tenants, Gmail, IMAP hosts, on-premises Exchange, and PST/EML archives with resumable delta passes. Also covers Active Directory, Entra ID, SharePoint, OneDrive, and Teams with assessment-backed scoping and Graph-based content transfer.
Flexible deployment with streaming security architecture - Choose managed SaaS with region-pinned Azure data residency or self-host inside your own Azure subscription, Kubernetes cluster, or Docker host. Migration content is streamed source to destination without persisting mail, file, or message bodies at rest. Five-tier RBAC with mandatory MFA for all privileged roles.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
You buy this platform as 12-month contracts, with no monthly billing. Pricing splits into two metering types: per-seat packs and per-GB data packs. Seat-based options cover identity work like AD/Entra migration and mailbox, Exchange, and Teams moves. Data packs meter migrated content by the gigabyte for drive and SharePoint/OneDrive migrations. The AD + M365 Bundle combines identity and workload seats in one subscription. Three add-ons—Google/Entra, Teams Chat, and Device Cloud—attach to an active seat-based plan rather than standing alone. You scale by buying more seats or gigabytes within each option.
Top-of-mind questions for buyers
What counts as one seat versus one GB unit for billing?
A seat meters one distinct migrated user for identity, mailbox, Exchange, or Teams work. A GB unit meters one gigabyte of migrated content for drive and SharePoint/OneDrive moves. Seat packs track people; data packs track transferred data volume. You choose the metering that matches the workload.
Do the add-ons work on their own, or must I buy a base plan first?
The Google/Entra, Teams Chat, and Device Cloud add-ons attach to an active seat-based plan. They cannot stand alone. You buy the base seat plan, then add the extra workload seats on top. Each add-on runs on a 12-month validity like the base plans.
If I run several workloads, which options drive my total cost?
Seat-based options bill per migrated user and apply independently of the data packs. Data packs bill per gigabyte of drive or SharePoint/OneDrive content. Both types appear on the same subscription and add together. Seat counts drive cost for people-heavy moves; gigabytes drive cost for content-heavy moves.
www.bridgead.io
Helpful?
Vendor refund policy
Refunds are generally not provided once a subscription, license, or migration service has been activated or consumed. Customers may request a refund for duplicate charges, billing errors, or verified service-access issues within 7 days of purchase. Approved refunds will be processed in accordance with AWS Marketplace policies and applicable terms. Please contact BridgeAD support before submitting a refund request.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
BridgeAD is built and operated by Apqor Technologies Pvt Ltd. Support, migration engineering, and security review questions route directly to the team that builds the platform - there is no reseller layer or outsourced support desk. Or Reach out at https://bridgead.io/support or Send Us Direct Email: support@bridgead.in
Getting Started
Request a scoped proof-of-concept or technical demo by contacting the sales team. The team responds within one business day.
Support Contact
For technical support, migration engineering questions, and commercial inquiries, contact the BridgeAD team directly. The same engineers who write the orchestration platform review your controlled-pilot plan and assist with troubleshooting.
Documentation and Resources
BridgeAD provides workload readiness documentation with exact scope, delivery boundaries, and manual boundaries for each supported capability. Status definitions and delivery assumptions are published alongside capability claims.
Refunds and Billing
For questions about billing or refund requests, contact the BridgeAD team through the same support channels.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
A comprehensive cloud security assessment of your AWS environment provided by AWS experts and powered by the Lacework platform. We will implement the Lacework security platform to inventory your cloud resources, analyse configurations, identify vulnerabilities, detect anomalies, and assess compliance risks. At the end of the assessment, you will receive a detailed report outlining security gaps, risks, and recommendations for hardening your cloud posture.
At Cloud Bridge, we specialise in seamlessly migrating your WordPress website to the robust Amazon Web Services (AWS) platform. Our comprehensive service ensures a smooth transition, leveraging AWS's powerful infrastructure to enhance your website's performance, scalability, and security.
WPP Enterprise Solutions launches enterprise Braze implementations on AWS in approximately 45 days, with an Amazon Bedrock-powered generative AI loop that turns engagement data into hyper-personalized, cross-channel customer experiences at scale.
CXBridge automates Genesys Cloud to Amazon Connect migrations by converting IVR flows, queues, routing, and agent configurations - reducing migration time and risk for enterprise contact centers.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.