Support

Email: abiola@chosenhomeland.com
Response time: Next business day (Pacific time). Installation issues for new customers are handled the same day where possible.
What to include: Your Azure subscription ID, the managed application name, the region, and - if a document did not process - the file name and the time you uploaded it. Please do not email document contents.
Status: Engine operational logs are available to you in your own subscription under the managed resource group's Function App → Log stream.

Before you install

Subscription type. Pay-as-you-go, CSP or Enterprise Agreement. Azure free-trial subscriptions carry a zero quota for the Consumption plan the engine runs on and the deployment will fail with SubscriptionIsOverQuotaForSku.
Resource provider. Microsoft.Solutions must be registered in the subscription (Subscription → Resource providers → Register). The Marketplace wizard normally does this for you.
Storage account. Create a general-purpose v2 storage account in the same region you will deploy AmeRedact to, and create a blob container named drop. The wizard's storage picker only lists accounts in the deployment region.
Permissions. The person installing needs Owner (or Contributor plus User Access Administrator) on the subscription, because the install creates a resource group and the post-install step assigns roles.

After you install: the one-time grant

AmeRedact never asks for a storage key. Instead, the engine has its own identity, and you give that identity permission to read drop and write redacted and manifest. The deployment's Outputs tab shows the identity's principal ID and the exact commands. In Azure Cloud Shell (PowerShell) or a local shell with Azure CLI:

az role assignment create --assignee-object-id <functionPrincipalId> --assignee-principal-type ServicePrincipal `
  --role "Storage Blob Data Owner" --scope <storageAccountResourceId>
az role assignment create --assignee-object-id <functionPrincipalId> --assignee-principal-type ServicePrincipal `
  --role "Storage Queue Data Contributor" --scope <storageAccountResourceId>

Or run the provided grant-storage-access.ps1 with the two values from the Outputs tab. Role assignments take one to two minutes to propagate; then drop a PDF and watch redacted/.

You can revoke access at any time by deleting those two role assignments. The engine will stop processing immediately and nothing else changes.

Known limits

Same-region storage. The storage account must be in the deployment region. Cross-region accounts are not shown in the wizard.
License lapses. If the license token is invalid or expired, files dropped during that window are rejected and are not retried automatically after the license is restored. Re-upload them (or upload a renamed copy).
Output format. Output is de-identified text (.deid.txt) plus a JSON audit record, not a redacted PDF image. Redacted-PDF output is on the roadmap.
Page allowance. Plans carry an annual page allowance. Usage reporting is available on request while in-product metering is being completed.
Managed resource group. The resource group the application creates is locked (read-only to your users). This is by design: it is what makes the deployment tamper-evident. Your storage account is not in that group and remains fully under your control.

Support

Before you install

After you install: the one-time grant

Known limits

Removing AmeRedact