The platform

Everything you need to govern, protect, and prove

Fabric Control is a complete operational layer for Microsoft Fabric. Here's what's inside — from the free governance core to the paid capabilities you unlock as you grow.

Included free, forever

The governance core

The free tier isn't a teaser. It's the full governance product for one Azure tenant — the same engine that powers everything above it.

Control-plane visibility

A single view of your tenant's operational state: workspace health, capacity utilization, refresh outcomes, and configuration — current-state, at a glance, always live.

Metadata-only, your choice

Fabric Control reports operational metadata only — counts, existence, status, structure. Your data content never leaves your boundary, and you control how much metadata you share above a small required baseline.

Configuration drift detection

Know when something changed. Fabric Control tracks configuration and entitlement drift so surprises surface before they become incidents.

Entitlement visibility

See who has access to what across your Fabric environment, surfaced in one place instead of buried in per-workspace settings.

Paid capabilities

Unlock the full system

Paid capabilities come as two flat-fee tiers, not a menu of individual modules: add Backup first, then the full Operations package when you need it. A 14-day full-system trial arrives at launch — join the waitlist to be first in line.

Backup & recovery

Automated, scheduled, versioned backup of workspaces, datasets, and pipeline definitions — landing in your own storage, under your own keys — with point-in-time recovery and restore-dependency sequencing that brings the estate back in the right order.

  • Backups land in your storage, under your keys
  • Point-in-time recovery with restore sequencing
  • Verified test restore & integrity catalog
  • Flat-fee pricing with defined limits

The first paid tier. A backup that can't restore isn't a backup — recovery you can prove, not assume.

Operations

The mature-operations layer, delivered as one package — SLA tracking with blast-radius impact, access governance, per-capacity cost attribution, and a universal pipeline logging engine. Know what would break before it breaks, and where the spend goes.

  • SLA tracking & blast-radius simulation
  • Access governance & RLS audit
  • Per-capacity cost attribution
  • Universal pipeline logging — one API call, auto-discovered

Bundled into the Backup + Ops tier — one package, not a menu.

How your data is handled

Your data stays put. Only metadata moves.

Fabric Control never transfers your data content to an external system — and you decide how much metadata it does share.

  • No data content leaves your tenant. The contents of your tables, files, and reports stay inside your boundary — always.
  • Only operational metadata is shared — counts, status, size, and configuration that describe your environment, not the data in it.
  • You control the metadata footprint. A small baseline is required to function; everything above it is your choice, adjustable at any time.
  • Credentials stay yours. Access is granted through a service principal you create, scoped and instantly revocable. Revocation ends Fabric Control's reach immediately.
Read the security & data handling model →
Data boundary diagramShutterstock 16:10 · ~640×420
search: "data security boundary shield network blue"

See it against your own tenant

Join the waitlist — free forever for one Azure tenant. Early adopters who later add a paid tier get 3 months free.