By invitation · for partners
The Gold Line
Service Pass.
A 6- or 12-month service membership that bundles XrossRoots professional services, tenant security optimization and priority support into one pass — personalised, numbered and verifiable.
Redeemable only for XrossRoots services. Not cash, not a payment instrument, not transferable.
One workstream = one menu item for one tenant, as set out in the Gold Line Agreement.
Secure Score outcomes are targets, subject to licensing and client change approval.
Paid tenant slots & Secure Score targets carry past the term. Full terms: xrossroot.com/gold-line
Sell security outcomes.
We deliver them.
Gold Line gives your business a senior Microsoft 365 security team on call. It is prepaid, priority-booked and ready for your clients the moment you close the deal.
Capacity, already reserved
Your workstreams and tenant slots are locked in from day one, so you don't wait for engineers or re-quote every engagement.
Your clients, your relationship
We work as an extension of your team and never sell directly to your clients.
Outcomes you can show
A Secure Score target of 75–90% gives your clients a number they can see in their own Microsoft dashboard.
The priority lane
Pass holders go to the front of our service desk queue, with a P1 response target of 30 minutes.
Twelve months for $5,000 less than two six-month passes, with two workstreams per tenant instead of one, plus a named account manager, Copilot readiness and an annual roadmap.
Both cover four tenants. Two six-month passes give each tenant one workstream; the twelve-month pass gives each tenant two. That's twice the work for $5,000 less.
Choose your line.
Both passes include a fixed set of services, redeemed through our service desk whenever you need them during the term.
Need three or more workstreams in a single tenant? That's a full rollout. Run it as a Professional Services project →
Terms written in your favour.
You pay for the pass up front, so the pass works for you. These commitments are part of every Gold Line Agreement. You don't have to ask for them.
Licensing delays, licence upgrades, slow client approvals — none of these cost you what you've paid for.
Your Secure Score target, seen through.
Licensing can be delayed, and partners often upgrade licences in the middle of an optimization. Whatever the reason, once the licensing and client approvals are in place, we keep working until the agreed Secure Score target is reached, even after your pass expires, at no extra cost.
Your tenant slots never lapse
Bring us the tenants you paid for in your own time. If your clients aren't ready within the term, you can still use your remaining tenant optimizations up to 12 months after the pass expires.
Booked workstreams always finish
Any workstream booked before your expiry date is delivered in full, even if the work runs past the end of the term.
A 90-day grace period
Workstreams you haven't booked yet can still be booked up to 90 days after expiry. Busy quarters happen.
Full upgrade credit
Move from the 6-month to the 12-month pass at any time during your term and we credit the full $20,000 towards it.
Swap a tenant, free
If a client leaves before their optimization starts, move the slot to another client at no cost.
Renewal price lock
Renew before your pass expires and keep today's price for your next term.
No surprise invoices
Anything outside the agreed scope is quoted and approved by you before we start. Nothing appears on an invoice you didn't sign off.
Your clients stay yours
We work as an extension of your team. We never approach or sell directly to the clients you bring to us.
Choose from the workstream menu.
Each workstream is one item from this menu, delivered for one tenant — scoped, delivered and documented by our engineers. The 6-month pass gives each tenant one workstream; the 12-month pass gives each tenant two.
Watch each workstream travel from your pass to a tenant — and the Secure Score climb. Example values for illustration.
6-month pass · 1 workstream per tenant · up to 2 tenants. Popular picks: Intune, Defender for Endpoint or Entra ID.
12-month pass · 2 workstreams per tenant · up to 4 tenants, 8 workstreams in all. Pick any two, or start from a suggested combo — twice the work for $5,000 less than two 6-month passes.
Two workstreams that work better together.
Zero Trust foundation
Identity and devices together, with Conditional Access that checks a device is compliant before granting access.
Protected devices
Enrol and manage every device, then onboard it to Defender for EDR and attack-surface reduction.
Threat & data protection
Stop threats on the endpoint, and stop sensitive data leaving it with endpoint DLP.
AI-ready data
Label and govern data, then tidy permissions so Copilot is safe to switch on.
Rolling out the full stack?
Make it a project.
Some clients need Intune, Entra ID, Defender, Purview and more in one tenant. For a full rollout like that, the pass isn't the right tool. We run it as a one-time Professional Services project instead: one scope, one fixed quote and one delivery plan, paid once.
Rule of thumb: if a tenant needs three or more workstreams, ask us for a project quote. You can hold a Gold Line pass and run Professional Services projects side by side.
From agreement to pass in hand.
Choose your term
Six or twelve months, matched to your pipeline.
Sign the agreement
The Gold Line Agreement sets out scope, terms and expiry.
Receive your pass
A numbered pass with your name and a unique verification QR.
Redeem services
Raise a request through our service desk; we scope and deliver.
Track usage
Scan the QR at any time to see what's used and what remains.
Every pass is verifiable.
The etched QR code on each pass is unique to that partner and that card. Scanning it opens a verification page on xrossroot.com.
- Authenticity — confirms the pass is genuine and active.
- Balance — shows workstreams and tenant optimizations used and remaining.
- Term — issue date, expiry and the plan's entitlements at a glance.
Clear terms, no surprises.
What is the Gold Line Service Pass?
What does one workstream cover?
How do the Secure Score targets work?
What happens to unused entitlements?
Can partners use entitlements for their own clients?
How is the pass paid for?
Entitlements, pricing and terms shown here are indicative. The signed Gold Line Agreement is the governing document.
Your clients see a stronger Secure Score.
You see a stronger pipeline.
Prepaid capacity, priority delivery and terms that protect what you've paid for. Gold Line is the simplest way to put a senior Microsoft 365 security team behind every deal you close.
Join the Gold Line.
Gold Line passes are issued to partners after a short conversation about your clients and pipeline. Tell us about your business and preferred term — we'll send the agreement and invoice.
Request a call
Tell us what you need and pick two time slots on different days, in your own time zone. We'll confirm one within one business day.
Request a callPrefer email? bridge@xrossroot.com