AI Agent Race Finland 2026 – finalistit on julkistettu!
Vuoden 2026 AI Agent Race Finland - finalistit ovat: CGI – Helsingin kaupungin ohjeapuri Helsingin kaupunki rakensi “Ohjeapuri”-AI‑agentin, joka muuttaa viralliset ohjeet nopeasti luonnollisella kielellä saataviksi vastauksiksi 40 000 työntekijälle. Ratkaisu nopeuttaa päätöksentekoa, parantaa palvelun laatua ja varmistaa toiminnan yhdenmukaisuuden ja sääntelyn noudattamisen. Agentti on toteutettu Azure OpenAI:n ja Azure AI Searchin avulla ja skaalattu organisaation päivittäiseen käyttöön. Efima – HKFoods Kuluttajapalvelun agentti Ratkaisu luokittelee kuluttajapalveluun saapuvat viestit, rikastaa niistä taustatiedot CRM‑järjestelmään ja luo valmiin vastausehdotuksen asiakaspalvelijalle. Tämä nopeuttaa asiakaspalvelua ja vapauttaa asiantuntijoiden aikaa vaativampiin tehtäviin. Tekoäly on integroitu nykyjärjestelmään ja käyttöönotto on tehty hallitusti käyttäjiä tukien. Elisa – TEBEAI Agentti automatisoi tarjouspyyntöasiakirjojen käsittelyn tunnistamalla olennaiset tuotetiedot ja yhdistämällä ne tuotevalikoimaan. Se tuottaa rikastetun Excel‑aineiston tarjousprosessin tueksi ja sisältää myös chat‑agentin tuotetietokyselyihin. Tavoitteena on nopeuttaa tarjousprosessia ja vähentää manuaalista työtä. Fellowmind – Fellowmind x Avant Tecno AI agents Ratkaisu automatisoi tilausten ja toimittajien vahvistusten käsittelyn Dynamics 365 ‑ympäristössä. AI‑agentit lukevat ja käsittelevät tilauksia automaattisesti, mikä on nopeuttanut prosesseja jopa 80 %. Samalla vapautuu asiantuntijoiden aikaa ja luodaan skaalautuva pohja jatkuvalle AI‑kehitykselle. Locoda – Tampereen Tilapalvelut: Autonominen työnohjaus palvelupyynnöstä laskutukseen Agentit priorisoivat työt, allokoivat resurssit ja optimoivat aikataulut automaattisesti. Prosessi etenee palvelupyynnöstä laskutukseen ilman manuaalista koordinointia, ja poikkeamat ohjataan ihmisille. Lopputuloksena toiminta tehostuu ja työn laatu sekä laskutuskelpoisuus paranevat. Finalistit on valittu kokonaisarvion perusteella, jossa painotettiin erityisesti seuraavia asioita: Vaikuttavuus asiakkaalle Agentin käyttöönotto ja käyttöaste Ratkaisun selkeys Toistettavuus ja skaalautuvuus Tarinan selkeys ja opittavuus Kilpailun voittaja julkistetaan 28.4.2026 Microsoft AI Tour - tapahtuman "Yhdessä kohti älykkäämpiä ratkaisuja" -lavalla. Lämpimät onnittelut kaikille finalisteille – ja kiitos kaikille kumppaneille upeista nominoinneista ja aktiivisesta osallistumisesta kilpailuun!Improve your Microsoft Marketplace listing performance with AI-powered, personalized recommendations
Discover how to strengthen your Microsoft Marketplace listing and increase discoverability with new AI-powered optimization capabilities available in App Advisor. This article explores how software development companies can receive fast, personalized recommendations that help improve clarity, strengthen value propositions, and align listings with Microsoft Marketplace best practices. In today’s competitive Marketplace environment, listing quality plays a critical role in whether customers discover, engage with, and ultimately choose your solution. The new listing optimization experience provides immediate, actionable feedback across key areas such as value proposition, solution description, and overall presentation—helping teams identify gaps and make improvements with confidence. Learn how this capability works, what it evaluates, and how your organization can use it to continuously refine your listing and drive better outcomes. Read the full article to explore how you can move from guesswork to data-driven optimization in Microsoft Marketplace. Read more: Get personalized, fast recommendations for your Marketplace listing to boost your discoverabilityHow to choose the right Marketplace offer type for your AI app or agent
Selecting the right Microsoft Marketplace offer type is one of the most important—and often most complex—decisions when bringing AI apps and agents to market. In this latest Marketplace blog article, you’ll learn how different offer types align to AI delivery models and why this choice directly impacts architecture, security boundaries, customer experience, and monetization strategy. The article breaks down key considerations across SaaS, Azure Managed Applications, containers, and virtual machines, helping software development companies understand how to balance control, scalability, and operational ownership. It also highlights how offer type decisions influence where AI workloads run, how data is managed, and how customers deploy and interact with your solution. If you’re building or publishing AI solutions in Microsoft Marketplace, this guidance will help you make informed decisions early—before development, security, and go-to-market plans are locked in. Read the full article: Marketplace Offer Types for AI Apps and agents: SaaS vs Managed App vs ContainersIntegrate Marketplace commerce signals to enforce entitlements in AI apps
How fulfillment and entitlement models differ by Microsoft Marketplace offer type AI apps and agents increasingly operate with runtime autonomy, dynamic capability exposure, and on‑demand access to tools and resources. That flexibility creates a new challenge for software companies: enforcing commercial entitlements (what a customer is allowed to access or use at runtime) correctly after a customer purchase through Microsoft Marketplace. Marketplace is the system of record for commercial truth, but enforcement always lives in your application, agent, or deployed resources. This post explains how Marketplace fulfillment and entitlement models differ by offer type—and what that means when you’re designing AI apps and agents that must respond correctly to subscription state, plan changes, and cancellations. You can always get a curated step-by-step guidance through building, publishing and selling apps for Marketplace through App Advisor. This post is part of a series on building and publishing well-architected AI apps and agents in Microsoft Marketplace. The series focuses on AI apps and agents that are architected, hosted, and operated on Azure, with guidance aligned to building and selling solutions through Microsoft Marketplace. Why AI apps and agents must integrate with Marketplace commerce signals Microsoft Marketplace is the commercial system of record for: Tracking purchase and subscription state Managing plan selection and plan changes Signaling cancellation and suspension AI apps and agents, by contrast, operate in environments where decisions are made continuously at runtime. They expose capabilities dynamically, invoke tools conditionally, and often operate without a human in the loop. That mismatch makes static enforcement insufficient, including: UI‑only checks Configuration‑time gating Prompt‑based constraints Marketplace communicates commercial truth, but it does not enforce value. That responsibility always belongs to the publisher’s application, agent, or deployed resources. Correct integration starts with understanding what Marketplace provides—and what your software must implement. What Marketplace provides—and what publishers must implement Before diving into APIs or offer types, it’s important to separate responsibilities clearly. Marketplace provides authoritative commercial signals, including: Subscription existence and current state Plan and entitlement context Licensing or usage boundaries associated with the offer Marketplace does not: Enforce your business logic Control runtime behavior Automatically limit feature or resource access Publishers are responsible for translating Marketplace signals into: Application behavior Agent capabilities Resource access boundaries That enforcement must be deterministic, auditable, and aligned with what the customer actually purchased. How those signals surface—through APIs, deployment constructs, licensing context, or metering—depends entirely on the fulfillment and entitlement model of the offer. How fulfillment and entitlement models differ by offer type Microsoft Marketplace supports multiple offer and fulfillment models, including: SaaS subscriptions Azure Managed Applications Container offers Virtual machine offers Other specialized Marketplace offer types Each model determines: How a customer receives value Where commercial signals appear Which integration mechanisms apply Where entitlement enforcement must occur Some offers rely on Marketplace APIs. Others rely on deployment‑time enforcement, resource scoping, or usage constraints. There is no single integration pattern that applies to every offer. Understanding this distinction is essential before designing entitlement enforcement for AI apps and agents. Marketplace integration responsibilities by offer type This section is the technical anchor of the post. Marketplace APIs are not universal; they apply differently depending on the offer model. SaaS offers SaaS offers integrate directly with Microsoft Marketplace through the SaaS Fulfillment APIs. These APIs are used to: Activate subscriptions Track plan changes Enforce suspension and cancellation In this model, Marketplace communicates subscription lifecycle events, but it does not enforce access. The publisher must: Map Marketplace subscriptions to internal tenants Maintain a durable subscription record Enforce entitlements at runtime For AI apps and agents, that enforcement typically happens in orchestration logic or tool‑invocation boundaries—not in the UI or prompts. SaaS Fulfillment APIs are the primary mechanism for receiving commercial truth, but the application remains responsible for acting on it. Container offers Container offers deliver value as container images and associated artifacts, such as Helm charts. In this model, the publisher is shipping a deployable artifact—not an application endpoint or API managed by Marketplace. Marketplace provides: Entitlement to deploy the container image Optional usage‑based billing and metering Ability to deploy to an existing AKS cluster or to a publisher configure one Enforcement occurs at: Deployment time, by controlling access to images Runtime usage, through configuration and limits Metered dimensions, when usage‑based billing applies For AI workloads packaged as containers, entitlement enforcement is typically embedded in the runtime configuration, resource limits, or metering logic—not in Marketplace APIs. Virtual machine offers Virtual machine offers are fulfilled through VM image deployment. In this model: Fulfillment is based on VM deployment Licensing and usage are enforced through the VM lifecycle Subscription state is less event‑driven but still contractually binding While there is no SaaS‑style fulfillment callback, publishers must still ensure that deployed workloads align with the purchased offer. For AI solutions delivered via VM images, enforcement is tied to licensing, configuration, and operational controls inside the VM. Azure Managed Applications For Azure Managed Applications, fulfillment is enforced through the Azure Resource Manager (ARM) deployment lifecycle. In this model: A Marketplace purchase establishes deployment rights Resources are deployed into a managed resource group Operational boundaries are defined by ARM and Azure role assignments Publishers enforce value through: Deployment behavior Resource configuration Lifecycle management and updates For AI solutions delivered as managed applications, entitlement enforcement is tied to what is deployed and how it is operated—not to an external subscription API. Marketplace establishes the contract, and Azure enforces access through infrastructure boundaries. Other offer types Other Marketplace offer types follow similar patterns, with varying degrees of API involvement and deployment‑time enforcement. The key principle holds: Marketplace establishes commercial rights, but enforcement is always implemented by the publisher, using the mechanisms appropriate to the offer model. Designing entitlement enforcement into AI apps and agents Entitlements must be enforced outside the model. Large language models should never be responsible for deciding what a customer is allowed to do. Effective enforcement belongs in: The interaction layer The orchestration layer Tool invocation boundaries Avoid: UI‑only enforcement Prompt‑based entitlement logic Soft limits without auditability AI agents should request capabilities from deterministic services that already understand subscription state and plan entitlements. This ensures enforcement is consistent, testable, and resilient. Handling plan changes, upgrades, and feature tiers Plan changes are common in Microsoft Marketplace. AI capability must align continuously with: The active subscription tier Purchased dimensions or limits Common examples include: Agent autonomy limits Tool or connector access Rate limits Data scope Feature gating must be deterministic and testable. When a plan changes, your application or agent should respond predictably—without manual intervention or redeployment. Failure, retry, and reconciliation patterns Marketplace events are not guaranteed to be: Ordered Delivered once Immediately available AI apps must handle: Duplicate events Missed callbacks Temporary Marketplace or network failures Reconciliation processes protect customers, publishers, and Marketplace trust. Periodic verification of subscription state ensures that runtime enforcement remains aligned with commercial reality. How Marketplace API integration affects readiness and review Marketplace reviewers look for: Clear enforcement of subscription state Clean suspension and revocation paths Strong integration leads to: Faster certification Fewer conditional approvals Lower support burden after launch Correct enforcement is not just a technical requirement—it’s a Marketplace readiness signal. What’s next in the journey Once entitlement enforcement is solid, the next layer of operational maturity includes: Usage‑based billing and metering architecture Performance, caching, and cost optimization Observability and operational health for AI apps and agents Key resources See curated, step-by-step guidance to help you build, publish, or sell your app or agent (no matter where you start) in App Advisor Quick-Start Development Toolkit can connect you with code templates for AI solution patterns Microsoft AI Envisioning Day Events How to build and publish AI apps and agents for Microsoft Marketplace Get over $126K USD in benefits and technical consultations to help you replicate and publish your app with ISV SuccessSecuring and governing AI agents before deployment
April 30 | 2:00-3:00 PM (GTM +10) Join this live webinar to learn how to secure and govern AI agents before they go live. Explore how to provision agents with Entra Agent ID, manage identities and credentials, enforce least-privilege access, and prevent risks like Shadow AI and agent sprawl. Join to gain practical guidance on governing AI agents across their full lifecycle—so you can deploy with confidence. To view the session live, register here: Securing and Governing AI Agents Before They Go Live You can view previous Security for Software Development Company series sessions on demand here: Security for Software Development Company Series: Securing the Agentic EraDesign tenant linking to scale selling on Microsoft Marketplace
Designing tenant linking and Open Authorization (OAuth) directly shapes how customers onboard, grant trust, and operate your AI app or agent through Microsoft Marketplace. In this context, consent refers to the explicit authorization a customer tenant grants—via OAuth—for a publisher’s application or agent to access specific resources and perform defined actions within that tenant. This post explains how to design scalable, review‑ready identity patterns that support secure activation, clear authorization boundaries, and enterprise trust from day one. Guidance for multi‑tenant AI apps Identity decisions are rarely visible in architecture diagrams, but they are immediately visible to customers. In Microsoft Marketplace, tenant linking and OAuth consent are not background implementation details. They shape activation, onboarding, certification, and long‑term trust with enterprise buyers. When identity decisions are made late, the impact is predictable. Onboarding breaks. Permissions feel misaligned. Reviews stall. Customers hesitate. When identity is designed intentionally from the start, Marketplace experiences feel coherent, secure, and enterprise‑ready. This article focuses on how to design tenant linking and consent patterns that scale across customers, offer types, and Marketplace review—without rework later. You can always get a curated step-by-step guidance through building, publishing and selling apps for Marketplace through App Advisor. This post is part of a series on building and publishing well-architected AI apps and agents in Microsoft Marketplace. The series focuses on AI apps and agents that are architected, hosted, and operated on Azure, with guidance aligned to building and selling solutions through Microsoft Marketplace. Why identity across tenants is a first‑class design decision Designing identity is not just about authentication. It is about how trust is established between your solution and a customer tenant, and how that trust evolves over time. When identity decisions are deferred, failure modes surface quickly: Activation flows that cannot complete cleanly Consent requests that do not match declared functionality Over‑privileged apps that fail security review Customers who cannot confidently revoke access These are not edge cases. They are some of the most common reasons Marketplace onboarding slows or certifications are delayed. A good identity and access management design ensures that trust, consent, provisioning, and operation follow a predictable and reviewable path—one that customers understand and administrators can approve. Marketplace tenant linking requirements A key mental model simplifies everything that follows, separate trust establishment from authorization. Tenant linking and OAuth consent solve different problems. Tenant linking establishes trust between tenants OAuth consent grants permission within that trust Tenant linking answers: Which customer tenant does this solution trust? OAuth consent answers: What is this solution allowed to do once trusted? AI solutions published in Microsoft Marketplace should enforce this separation intentionally. Trust must be established before meaningful permissions are granted, and permission scope must align to declared functionality. Making this explicit distinction early prevents architectural shortcuts that later block certification. Throughout the rest of this post, tenant linking refers to trust establishment, not permission scope. Microsoft Entra ID as the identity foundation Microsoft Entra ID provides the primitives for identity-based access control, but the concepts only become useful when translated into publisher decisions. Each core concept maps to a choice you make early: Home tenant vs resource tenant Determines where operational control lives and how cross‑tenant trust is anchored. App registrations Define the maximum permission boundary your solution can ever request. Service principals Determine how your app appears, is governed, and is managed inside customer tenants. Managed identities Reduce long‑term credential risk and operational overhead. Understanding these decisions early prevents redesigning consent flows, re‑certifying offers, or re‑provisioning customers later. Marketplace policies reinforce this by allowing only limited consent during activation, with broader permissions granted incrementally after onboarding. Importantly, activation consent is not operational consent. Activation establishes the commercial and identity relationship. Operational permissions come later, when customers understand what your solution will actually do. OAuth consent patterns for multi‑tenant AI apps OAuth consent is not an implementation detail in Marketplace. It directly determines whether your AI app can be certified, deployed smoothly, and governed by enterprise customers. Common consent patterns map closely to AI behavior: User consent Supports read‑only or user‑initiated interactions with no autonomous actions. Admin consent Enables agents, background jobs, cross‑user access, and cross‑resource operations. Pre‑authorized consent Enables predictable, enterprise‑grade onboarding with known and approved scopes. While some AI experiences begin with user‑driven interactions, most AI solutions in Marketplace ultimately require admin consent. They operate asynchronously, act across resources, or persist beyond a single user session. Aligning expectations early avoids friction during review and deployment. Designing consent flows customers can trust Consent dialogs are part of your product experience. They are not just Microsoft‑provided UI. Marketplace reviewers evaluate whether requested permissions are proportional to declared functionality. Over‑scoped consent remains one of the most common causes of delayed or failed certification. Strong consent design: Requests only what is necessary for declared behavior Explains why permissions are needed in plain language Aligns timing with customer understanding Poor explanations increase admin rejection rates, even when permissions are technically valid. Clear consent copy builds trust and accelerates approvals. Tenant linking across offer types Identity design must align with offer type; a helpful framing is ownership: SaaS offers The publisher owns identity orchestration and tenant linking. Microsoft Marketplace reviewers expect this alignment, and mismatches surface quickly during certification. Containers and virtual machines The customer owns runtime identity; the publisher integrates with it. Managed applications Responsibility is shared, but the publisher defines the trust boundary. Each model carries different expectations for control, consent, and revocation. Designing tenant linking that matches the offer type reduces customer confusion. When consent happens in Marketplace lifecycle Many identity issues stem from unclear timing. A simple lifecycle helps anchor expectations: Buy – The customer purchases the offer Activate – Tenant trust is established Consent – Limited activation consent is granted Provision – Resources and configurations are created Operate – Incremental operational consent may be requested Revoke – Access and trust can be cleanly removed Making this sequence explicit in your design—and in your documentation—dramatically reduces confusion for customers and reviewers alike. How tenant linking shapes Marketplace readiness Identity tends to leave a lasting impression as it is one of the first architectural design choices encountered by customers. Strong tenant linking and consent design lead to: Faster certification (applies to SaaS offer only) Fewer conditional approvals Lower onboarding drop‑off Easier enterprise security reviews These outcomes are not accidental. They reflect intentional design choices made early. What’s next in the journey Tenant identity sets the foundation, but it is only one part of Marketplace readiness. In upcoming guidance, we’ll connect identity decisions to commerce, SaaS Fulfillment APIs, and operational lifecycle management—so buy, activate, provision, operate, and revoke will work together as a single, coherent system. Key Resources See curated, step-by-step guidance to help you build, publish, or sell your app or agent (no matter where you start) in App Advisor Quick-Start Development Toolkit can connect you with code templates for AI solution patterns Microsoft AI Envisioning Day Events How to build and publish AI apps and agents for Microsoft Marketplace Get over $126K USD in benefits and technical consultations to help you replicate and publish your app with ISV SuccessAI apps and agents: choosing your Marketplace offer type
Choosing your Marketplace offer type is one of the earliest—and most consequential—decisions you’ll make when preparing an AI app for Microsoft Marketplace. It’s also one of the hardest to change later. This post is the second in our Marketplace‑ready AI app series. Its goal is not to push you toward a specific option, but to help you understand how Marketplace offer types map to different AI delivery models—so you can make an informed decision before architecture, security, and publishing work begins. You can always get a curated step-by-step guidance through building, publishing and selling apps for Marketplace through App Advisor. This post is part of a series on building and publishing well-architected AI apps and agents in Microsoft Marketplace. The series focuses on AI apps and agents that are architected, hosted, and operated on Azure, with guidance aligned to building and selling solutions through Microsoft Marketplace. Why offer type is an important Marketplace decision Offer type is more than a packaging choice. It defines the operating model of your AI app on Marketplace: How customers acquire your solution Where the AI runtime executes Determining the right security and business boundaries for the AI solution and associated contextual data Who operates and updates the system How transactions and billing are handled Once an offer type is selected, it cannot be changed without creating a new offer. Teams that choose too quickly often discover later that the decision creates friction across architecture, security boundaries, or publishing requirements. Microsoft’s Publishing guide by offer type explains the structural differences between offer types and why this decision must be made up front. How Marketplace offer types map to AI delivery models AI apps differ from traditional software in a few critical ways: Contextual data may need to remain in a specific tenant or geography Agents may operate autonomously and continuously Control over infrastructure often determines trust and compliance How the solution is charged and monetized, including whether pricing is usage‑based, metered, or subscription‑driven (for example, billing per inference, per workflow execution, or as a flat monthly fee) The buyer’s technical capability, including the level of engineering expertise required to deploy and operate the solution (for example, SaaS is generally easier to consume, while container‑based and managed application offers often require stronger cloud engineering and DevOps skills) Marketplace offer types don’t describe features. They define responsibility boundaries—who controls the AI runtime, who owns the infrastructure, and where customer data is processed. At a high level, Marketplace supports four primary delivery models for AI solutions: SaaS Azure Managed Application Azure Container Virtual Machine Each represents a different balance between publisher control and customer control. The sections below explain what each model means in practice. Check out the interactive offer selection wizard in App Advisor for decision support. Below, we unpack each of the offer types. SaaS offers for AI apps SaaS is the most common model for AI apps and agents on Marketplace—and often the default starting point. With a SaaS offer, the AI service runs in the publisher’s Azure environment and is accessed by customers through a centralized endpoint. This model works well for: Multi‑tenant AI platforms and agents Continuous model and prompt updates Rapid experimentation and iteration Usage‑based or subscription billing Because the service is centrally hosted, publishers retain full control over deployment, updates, and operational behavior. For multi-tenant AI apps, this also means making early decisions about Microsoft Entra ID configuration—such as how customers are onboarded, whether access is granted through tenant-level consent or external identities, and how user identities, roles, and data are isolated across tenants to prevent cross-tenant access or data leakage. For official guidance, see the SaaS section of the Marketplace publishing guide and the AI agent overview, which describes SaaS‑based agent deployments. Plan a SaaS offer for Microsoft Marketplace. Azure Managed Applications for AI solutions In this model, the solution is deployed into the customer’s Azure subscription, not the publisher’s. There are two variants: Managed applications, where the publisher retains permissions to operate and update the deployed resources Solution templates, where the customer fully manages the deployment after installation This model is a strong fit when AI workloads must run inside customer‑controlled environments, such as: Regulated or sensitive data scenarios Customer‑owned networking and identity boundaries Infrastructure‑heavy AI solutions that can’t be centralized Willingness or need on part of the customer or IT team to tailor the app to the needs of the end customer specific environment Managed Applications sit between SaaS and fully customer‑run deployments. They offer more customer control than SaaS, while still allowing publishers to manage lifecycle aspects when appropriate. Marketplace guidance for Azure Applications is covered in the publishing guide. For more information, see the following links: Plan an Azure managed application for an Azure application offer. Azure Container offers for AI workloads With container offers, the customer runs the AI workload—typically on AKS—using container images supplied by the publisher. This model is best suited for scenarios that require: Strict data residency Air‑gapped or tightly controlled environments Customer‑managed Kubernetes infrastructure The publisher delivers the container artifacts, but deployment, scaling, and runtime operations occur in the customer’s environment. This shifts operational responsibility, risk and compute costs away from the publisher and toward the customer. Container offer requirements are covered in the Marketplace publishing guide. Plan a Microsoft Marketplace Container offer. Virtual Machine offers for AI solutions Virtual Machine offers still play a role, particularly for specialized or legacy AI solutions. VM offers package a pre‑configured AI environment that customers deploy into their Azure subscription. Compared to other models, they offer: Updates and scaling are more tightly scoped Iteration cycles tend to be longer The solution is more closely aligned with specific OS or hardware requirements They are most commonly used for: Legacy AI stacks Fixed‑function AI appliances Solutions with specialized hardware or driver dependencies VM publishing requirements are also documented in the Marketplace publishing guide. Plan a virtual machine offer for Microsoft Marketplace. Comparing offer types across AI‑specific decision dimensions Rather than asking “which offer type is best,” it’s more useful to ask what trade‑offs you’re making. Key lenses to consider include: Who operates the AI runtime day‑to‑day Where customer data and AI prompts inputs and outputs are processed and stored How quickly models, prompts, and logic can evolve The balance between publisher control and customer control How Marketplace transactions and billing align with runtime behavior SaaS Container (AKS / ACI) Virtual Machine (VM) Azure Managed Application What it is Fully managed, externally hosted app integrated with Marketplace for billing and entitlement Containerized app deployed into customer-managed Azure container environments VM image deployed directly into the customer’s Azure subscription Azure native solution deployed into the customer’s subscription, managed by the publisher Control plane Publisher‑owned Customer owned Customer owned Customer owned (with publisher access) Operational model Centralized operations, updates, and scaling Customer operates infra; publisher provides containers Customer operates infra; publisher provides VM image Per customer deployment and lifecycle Good fit scenarios • Multi‑tenant AI apps serving many customers • Fast onboarding and trials • Frequent model or feature updates • Publisher has full runtime control • AI apps or agents built as microservices • Legacy or lift-and-shift AI workloads • Enterprise AI solutions requiring customer owned infrastructure Avoid when • Customers require deployment into their own subscription • Strict data residency mandates customer control • Offline or air‑gapped environments are required • Customers standardize on Kubernetes • Custom OS or driver dependencies • Tight integration with customer Azure resources Typical AI usage pattern Centralized inference and orchestration across tenants • Portability across environments is important • Specialized runtime requirements • Strong compliance and governance needs Different AI solutions land in different places across these dimensions. The right choice is the one that matches your operational reality—not just your product vision. Note: If your solution primarily delivers virtual machines or containerized workloads, use a Virtual Machine or Container offer instead of an Azure Managed Application. Supported sales models and pricing options by Marketplace offer type Marketplace offer types don’t just define how an AI app and agent is deployed — they also determine how it can be sold, transacted, and expanded through Microsoft Marketplace. Understanding the supported sales models early helps avoid misalignment between architecture, pricing, and go‑to‑market strategy. Supported sales models Offer type Transactable listing Public listing Private offers Resale enabled Multiparty private offers Azure IP Co‑sell eligible SaaS Yes Yes Yes Yes Yes Yes Container Yes Yes Yes No Yes Yes Virtual Machine Yes Yes Yes Yes Yes Yes Azure Managed Application Yes Yes Yes No Yes Yes What these sales models mean Transactable listing A Marketplace listing that allows customers to purchase the solution directly through Microsoft Marketplace, with billing handled through Microsoft. Public listing A listing that is discoverable by any customer browsing Microsoft Marketplace and available for self‑service acquisition. Private offers Customer‑specific offers created by the publisher with negotiated pricing, terms, or configurations, purchased through Marketplace. Resale enabled Using resale enabled offers, software companies can authorize their channel partners to sell their existing Marketplace offers on their behalf. After authorization, channel partners can independently create and sell private offers without direct involvement from the software company. Multiparty private offers Private offers that involve one or more Microsoft partners (such as resellers or system integrators) as part of the transaction. Azure IP Co‑sell eligible When all requirements are met this allows your offers to contribute toward customers' Microsoft Azure Consumption Commitments (MACC). Pricing section Marketplace offer types determine the pricing models available. Make sure you build towards a marketplace offer type that aligns with how you want to deploy and price your solution. SaaS – Subscription or flat‑rate pricing, per‑user pricing, and usage‑based (metered) pricing. Container – Kubernetes‑based offers support multiple Marketplace‑transactable pricing models aligned to how the workload runs in the customer’s environment, including per core, per core in cluster, per node, per node in cluster, per pod, or per cluster pricing, all billed on a usage basis. Container offers can also support custom metered dimensions for application‑specific usage. Alternatively, publishers may offer Bring Your Own License (BYOL) plans, where customers deploy through Marketplace but bring an existing software license. Virtual Machine – Usage-based hourly pricing (flat rate, per vCPU, or per vCPU size), with optional 1-year or 3-year reservation discounts. Publishers may also offer Bring Your Own License (BYOL) plans, where customers bring an existing software license and are billed only for Azure infrastructure. Azure Managed Application – A monthly management or service fee charged by the publisher; Azure infrastructure consumption is billed separately to the customer. Note: Azure Managed Applications are designed to charge for management and operational services, not for SaaS‑style application usage or underlying infrastructure consumption. Buyer‑side assumptions to be aware of For customers to purchase AI apps and agents through these sales models: The customer must be able to purchase through Microsoft Marketplace using their existing Microsoft procurement setup Marketplace purchases align with enterprise buying and governance controls, rather than ad‑hoc vendor contracts For private and multiparty private offers, the customer must be willing to engage in a negotiated Marketplace transaction, rather than pure self‑service checkout Important clarification Supported sales models are consistent across Marketplace offer types. What varies by offer type is how the solution is provisioned, billed, operated, and updated. Sales flexibility alone should not drive offer‑type selection — it must align with the architecture and operating model of the AI app and agent. How this decision impacts everything that follows Offer type decisions ripple through the rest of the Marketplace journey. They directly shape: Architecture design choices Security and compliance boundaries Fulfillment APIs and billing integration Publishing and certification requirements Cost, scalability, and operational responsibility Follow the series for updates on new posts. What’s next in the journey With the offer type decision in place, the focus shifts to turning that choice into a production‑ready solution. This includes designing an architecture that aligns with your delivery model, establishing clear security and compliance boundaries, and preparing the operational foundations required to run, update, and scale your AI app or agent confidently in customer environments. Getting these elements right early reduces rework and sets the stage for a smoother Marketplace journey. See the next post in the series: Designing Production‑Ready AI App and Agent Architectures for Microsoft Marketplace. Key resources See curated, step-by-step guidance to help you build, publish, or sell your app or agent (no matter where you start) in App Advisor Quick-Start Development Toolkit can connect you with code templates for AI solution patterns Microsoft AI Envisioning Day Events How to build and publish AI apps and agents for Microsoft Marketplace Get over $126K USD in benefits and technical consultations to help you replicate and publish your app with ISV SuccessSuccess with AI apps and agents on Marketplace: the end-to-end
Preparing an AI app or agent for Microsoft Marketplace requires solving a broader set of problems—ones that extend beyond the model and into architecture, security, compliance, operations, and commerce. These requirements often surface late, when teams are already moving toward launch. Teams often reach the same milestone: the AI works, the demo is compelling, and early customers are interested. But when it’s time to publish, transact, and operate that solution through Marketplace, gaps emerge—around security, compliance, reliability, operations, or commerce integration. Whether you are demo ready or starting with a great AI idea, this series is designed to address those challenges through a connected, end‑to‑end journey. It brings together the decisions and requirements needed to build AI apps and agents that are not only functional, but Marketplace‑ready from day one. You can always get a curated step-by-step guidance through building, publishing and selling apps for Marketplace through App Advisor. This post is part of a series on building and publishing well-architected AI apps and agents on Microsoft Marketplace. The series focuses on AI apps and agents that are architected, hosted, and operated on Azure, with guidance aligned to building and selling solutions through Microsoft Marketplace. Why an end‑to‑end journey matters A working AI app does not automatically mean a Marketplace‑ready AI app. Marketplace readiness spans far more than model selection or prompt engineering. It requires a holistic approach across: Architecture and hosting design Security and AI guardrails Compliance and governance Operational maturity Commerce, billing, and lifecycle integration While guidance exists across each of these areas, it is often fragmented. This series connects those pieces into a single, reusable mental model that software companies can use to design, build, publish, and operate AI apps and agents with confidence. This first post frames the journey. Each subsequent post goes deep into one stage. The marketplace‑ready AI app and agent lifecycle At a high level, Marketplace‑ready AI apps and agents follow this lifecycle: Define how the AI app and agent will be delivered Identify industry compliance and regulatory requirements Design a production‑ready AI architecture Embed security and AI guardrails into the design Validate compliance and governance Build and test an MVP with potential customers Build for quality, reliability, and scale Integrate with Marketplace commerce Prepare for publishing and go‑live Operate, monitor, and evolve safely Promoting your AI app and agent to close initial sales This lifecycle is intentionally introduced once, at a high level. Decisions made early will shape everything that follows. Throughout the series, this lifecycle serves as a shared reference point. Step 1: Decide how your AI app and agent will be packaged and delivered The first decision is how the AI app and agent will be delivered through Marketplace. Offer types—such as SaaS, Azure Managed Applications, Containers, and Virtual Machines—are not just listing formats. They are delivery models that directly impact: Identity and authentication Billing and metering Deployment responsibilities Operational ownership Customer onboarding experience Supported sales models Choosing an offer type early helps avoid costly redesigns later. Step 2: Design a production‑ready AI architecture Marketplace AI apps and agents are expected to meet enterprise customer expectations for performance, reliability, and security. Architecture decisions must account for: Customer business, compliance, and security needs Offer‑specific hosting best practices For example, SaaS offers typically require: Tenant isolation Environment separation Strong identity boundaries Architecture must also support both AI behavior and Marketplace lifecycle events, such as provisioning, subscription changes, and entitlement checks. Step 3: Secure the AI app and agent and define guardrails Security cannot be treated as a certification checklist at the end of the process. AI introduces new risks beyond traditional applications, including expanded attack surfaces through prompts and inputs. Frameworks such as the OWASP GenAI Top 10 provide a useful lens for identifying these risks. Guardrails must be enforced: At design time through architecture and policy decisions At runtime through monitoring, enforcement, and response AI‑specific incident response must also factor in privacy regulations and customer trust. Step 4: Treat AI agents as compliance‑governed systems AI agents and their data are first‑class compliance subjects. This includes: Prompts and responses Contextual and training data Actions taken by the agent These artifacts must be auditable and governed inline, not retroactively. At the same time, publishers must balance compliance with intellectual property protection by enabling explainability and transparency without exposing proprietary logic. Step 5: Build for quality, reliability, and scale Marketplace buyers expect predictable behavior. AI apps and agents should formalize: Quality and evaluation frameworks Reliability and performance targets Scaling and cost optimization strategies Quality, reliability, and performance directly influence customer trust and satisfaction. Step 6: Integrate with Marketplace commerce and lifecycle APIs Marketplace is not “just a listing.” For transactable offers that help you sell globally direct to customers or through channel and allow customers to count sales of your app against their cloud commitments, Marketplace becomes an operational contract. Subscription state, entitlements, billing, and metering are runtime responsibilities of the application. For SaaS offers, SaaS Fulfillment APIs define the source of truth for subscription lifecycle events. Integrate Marketplace lead flows with your CRM using the Marketplace lead connector for CRM Step 7: Prepare for publishing, certification, and go‑live Publishing requires more than code completion. Marketplace certification validates: Security posture Customer experience Operational readiness Using templates, checklists, and tooling such as Quick Start Development Toolkit, Marketplace Rewards resources, and App Advisor reduces friction and rework. Step 8: Operate and evolve safely after go‑live Launch is not the end of the journey. AI apps and agents evolve continuously, making: Safe deployment strategies CI/CD discipline Rollback and monitoring practices This is essential for protecting both customers and publishers. Operational maturity also includes maintaining Marketplace offer assets (store images) as the product evolves. Use this framework to help you build a production ready AI app and agent, well architected, secured, reliable, scalable and integrated with Microsoft Marketplace global commerce engine. Step 9: Promote your AI app and agent Becoming Marketplace‑ready does not end at publication. AI app and agent success also depends on how effectively the solution is discovered, evaluated, and trusted by customers within Microsoft Marketplace and the broader Microsoft ecosystem. Promotion in Microsoft Marketplace is tightly integrated with how customers discover and purchase solutions. AI apps and agents are surfaced through Marketplace search, categories, and in‑product experiences, and once your AI app or agent becomes Azure IP co-sell eligible - the purchase of your offer can count towards your customers' Microsoft Azure Consumption Commitments (MACC) motivating customers to buy your offer. This reduces buying friction and accelerates evaluation‑to‑purchase transitions. Top activities to grow your sales: Optimize your listing once you publish your app, by getting an agentic review of your published listing in seconds, based on Marketplace listing best practices and expert Microsoft editorial guidance. Promote your Marketplace offer and track your engagement following best practices. Manage and nurture leads from trials to purchase, and from purchase to higher level SKUs. Private offers, which allow publishers to create customer-specific or negotiated offers directly through Marketplace, including multiparty private offers involving Microsoft channel partners Sell through channel, use resale enabled offers to enable resellers and channel partners to sell your app to their customers, Co-sell motions, where eligible AI apps and agents are sold jointly with Microsoft sellers and count toward customer cloud consumption commitments Effective customer engagement depends on alignment between how the AI app and agent is positioned and how it is delivered. Clear descriptions, accurate architectural boundaries, and transparent operational expectations help customers move confidently from discovery to production adoption. For publishers, programs such as ISV Success provide guidance and tooling to help align technical readiness, Marketplace requirements, and go‑to‑market execution as AI apps and agents scale through Microsoft Marketplace. Sales don't happen by accident, it's essential you engage in promoting your marketing. When promotion is treated as a first‑class step in the lifecycle, it reinforces trust, accelerates evaluation, and increases the likelihood that an AI app and agent transitions from initial interest to sustained use. How to use this series This series is designed to be used in two ways: Read sequentially to understand the full Marketplace‑ready journey Use individual posts alongside Microsoft Learn content, App Advisor, and Quick Start resources for deeper implementation guidance This series provides a structured, end‑to‑end view of what it takes to move from a working AI app and agent to a solution that customers can trust, deploy, and buy through Marketplace. It is designed to complement hands‑on implementation guidance, including Microsoft Learn resources such as Publishing AI agents to the Microsoft marketplace, and to help software companies navigate Marketplace readiness with fewer surprises and less rework. The upcoming post is about choosing your marketplace offer type which defines the operating model of your AI app or agent on Marketplace and influences key architectural decisions for your app or agent. Key resources See curated, step-by-step guidance to help you build, publish, or sell your app or agent (no matter where you start) in App Advisor, Quick-Start Development Toolkit Microsoft AI Envisioning Day Events How to build and publish AI apps and agents for Microsoft Marketplace Get over $126K USD in benefits and technical consultations to help you replicate and publish your app with ISV SuccessWhen cloud apps become a weak link: How FortiAppSec Cloud in Microsoft Marketplace bridges the gap
In this guest blog post, Srija Reddy Allam, Cloud Security/DevOps Architect, Fortinet, discusses the increase of attacks targeted at web applications and APIs and how FortiAppSec Cloud in Microsoft Marketplace provides a layer of adaptive security to address the challenge.Discover new ways to innovate—read the State of the Partner Ecosystem blog
The AI industry has rapidly moved from experimentation to production, and Microsoft partners play a critical role in helping organizations deploy AI responsibly and at scale. Today’s customers expect secure, governed, outcome-driven solutions from their providers. To support the partner ecosystem, Microsoft invests in offerings like incentives, skilling, and go-to-market resources, so partners can continue to innovate and grow. Microsoft also tracks emerging AI trends and insights—synthesizing them to keep you informed and pointing you toward program offerings you can use to capture market opportunity. Explore the State of the Partner Ecosystem blog to learn about the latest AI developments and the investments Microsoft makes to empower partners to lead the way in Frontier Transformation. Visit the blog
