Out of US dependencies.
Into the sovereign EU cloud.
We build and run your Kubernetes platform on Exoscale — GDPR compliant and without lock-in. We take care of the migration from AWS, Azure or GCP too.
- GDPR & NIS2
- Data in Austria or the EU
- No US dependency
- No vendor lock-in
Who is this for?
For companies that process critical data or have to meet NIS2, with their own or off-the-shelf software.
- Mid-sized companies and SaaS providers in the DACH region
- Companies handling sensitive data, such as patient data
- Regulated industries like healthcare or fintech
- Data that has to stay in Austria or the EU for GDPR or customer reasons
- Companies that want to outsource operations and infrastructure
- Teams without their own Kubernetes and DevOps people
- Anyone who prefers local, personal support over a hotline queue
- Healthcare solutions connected to the Austrian e-card network
When the US cloud becomes a business risk
US hyperscalers are subject to the CLOUD Act. That can affect GDPR compliance, data sovereignty and control over critical data.
Foreign legal access
US providers are subject to laws like the CLOUD Act and to political decisions. Even data stored in the EU can be affected.
Geopolitical uncertainty
Conflicts, sanctions or political decisions can lead to restrictions or outages in cloud operations.
Higher costs
Legal reviews, data protection and compliance requirements cause extra work and ongoing costs.
Harder to switch providers
Proprietary cloud services make changes and a later switch complex and expensive — vendor lock-in.
Digital sovereignty is risk management.
Alexander J. Gassner, MScmanaging director · cloud architectThe sovereign cloud platform
A ready-to-run platform based on Kubernetes — for secure, independent operation of your applications and critical data.
- Your data stays in Austria or the EU
- Technical measures for GDPR and NIS2
- No dependency on US providers
- Migration from AWS, Google Cloud or Azure
- Modern cloud-native platform on Kubernetes
- Fully automated CI/CD pipelines
- 24/7 monitoring & alerting
- Protection against data loss through automatic backups
- No vendor lock-in
Automated infrastructure
Run entirely via infrastructure as code and GitOps — reproducible, versioned, automated.
Kubernetes & containers
All applications run containerised on Kubernetes — scalable, standardised, without proprietary dependencies.
Monitoring & observability
Prometheus, Grafana and Loki show availability, response times and errors; alerts go straight to us.
Backups & recovery
Automated backup and restore procedures protect your data and keep operations safe in an emergency.
Delivery standards
Every release runs through the same pipeline: tests, build, deployment via GitOps, rollback via git revert.
Security audits & pen tests
If needed, security experts from Certitude Consulting GmbH check the platform and infrastructure for vulnerabilities.
NIS2 comes through the supply chain
Austria's NISG 2026 has applied since 1 October 2026. Affected companies pass the requirements on to their service providers, including whoever runs their software. If you run applications for such clients, you have to be able to prove data residency, backups and reporting channels.
// what lands on your desk
- Questionnaires and security requirements from clients
- Evidence of data residency, access and encryption
- Requirements for backup, restore and emergency plans
- Reporting channels and response times for security incidents
- Documentation of architecture and operating processes
// what we cover
- Data residency in Austria or the EU, verifiable
- Encryption, access control and logging
- Backup and restore procedures, tested at agreed intervals
- Monitoring and alerting as the basis for reporting deadlines
- Documented architecture and operating processes
- Security audits and penetration tests via Certitude Consulting GmbH
We deliver the technical side and the evidence for it. The legal assessment of whether and how your company is affected stays with lawyers — we're not the right people for that.
// opportunity
Right now the security question is a reason to talk — not just a risk.
If you can answer these questions with evidence, you stay in the running with clients who now have to vet their service providers.
The steps to go-live
We take care of implementation and project coordination. Your team provides access and decisions, not working days.
- 01
Getting to know each other
In a short, free initial call we learn about your situation and clarify whether and how we can help.
- Understanding your current situation and goals
- Assessment of data protection, compliance and operations requirements
- Initial assessment of feasibility and approach
- No obligation, no costs, no commitment
- 02Bonus: €200 Exoscale cloud credit
Strategy workshop
In a free two-hour workshop we assess the current state, define the target state and work out a concrete roadmap.
- Free 2h workshop with the people who build the platform
- Analysis of the existing infrastructure and applications
- Definition of the target architecture on Exoscale
- Concrete recommendations as the basis for our quote
- A clear migration and implementation strategy
- 03
Platform build & migration
We build the sovereign cloud platform and migrate the applications.
- Setting up the Kubernetes platform on Exoscale
- Infrastructure as code & automated provisioning
- Setting up security standards
- Migration of applications and data
- Setting up CI/CD pipelines, monitoring and backups
- 04
Go-live & handover
We take the platform into production and hand it over in a controlled way.
- Go-live and cutover
- Monitoring, alerting and operational sign-off
- Documentation of architecture and processes
- Knowledge transfer and enablement of your team
- Support after go-live as well
What we add to Exoscale
Exoscale provides the infrastructure. A production-ready platform also needs architecture, automation and experience.
Your team stays on the day-to-day
Building a cloud environment isn't a side project. We take over planning, implementation and support — your team stays productive.
Experience from real projects
We have migrated projects from AWS to Exoscale and know the pitfalls: dependencies on managed services, DNS cutover, data migration without downtime.
A platform, not parts
Exoscale provides VMs, Kubernetes and storage. We turn them into a production-ready platform with CI/CD, monitoring, backups and security standards.
No trial and error in production
We bring a platform that already runs in our projects. Your team doesn't have to invent it first.
Two partners, one goal
Exoscale provides the secure European infrastructure. We take care of architecture, hands-on implementation and operations — with personal support and a direct contact.
We build and run platforms on Exoscale: Kubernetes, CI/CD, monitoring and migrations from AWS, Azure or GCP.
- Direct contact person
- Cloud and DevOps specialists
- AWS-to-Exoscale migrations from our own projects
- Strategic and technical advice
- Training and workshops
- Fixed price for a clearly defined scope
Sovereign European cloud, GDPR compliant, with data centres in Vienna.
- European data sovereignty
- GDPR compliant
- Data centres in Austria (Vienna)
- Direct personal support
- Predictable pricing
- Regional connections such as e-card
- Certified to ISO 27001, BSI C5 and SOC 2 Type II, among others
SaaS on sovereign cloud
How we built labcomplete®: a SaaS platform for lab requests and results with more than 1,000 daily users and data residency in Austria, for medical practices and laboratories.
- exoscale
- kubernetes
- pulumi
- argocd
Our toolbox
Cloud native, built on proven open source tools. Which ones exactly depends on the project — the principle stays the same.
- infrastructure =
- KubernetesExoscalePulumi
- delivery =
- ArgoCDGitOpsCI/CD-Pipelines
- observability =
- GrafanaOpenTelemetryPrometheusLokiTempo
Questions and answers
Why Exoscale?
European data sovereignty, data centres in Vienna, GDPR compliance, predictable prices and personal support instead of a hotline. Plus regional connections like the e-card network. We are an Exoscale partner and know the platform from production projects.
How sustainable is Exoscale?
According to Exoscale, around 90% of its electricity comes from renewable sources, and both Vienna zones and the sites in Germany and Switzerland run on 100% certified green power. The data centre partners A1 and Equinix aim to be carbon neutral by 2030. Exoscale uses its servers for three years or longer on average and mostly runs refurbished networking equipment.
Details and certificates at Exoscale →Why not just migrate to Exoscale ourselves?
In principle, yes: Exoscale is well documented and deliberately simpler than AWS or Azure. But the work is rarely in the cloud itself; it's in everything around it: CI/CD pipelines, Kubernetes configuration, secrets management, monitoring, automated backups and a database migration without downtime. We have done this in several projects, internal ones included.
Does a migration work if applications depend heavily on AWS, GCP or Azure?
That's the normal case. We analyse the existing services and identify which can be replaced 1:1 and where changes are needed. Not everything has to be migrated at once — we work in phases and prioritise by effort and benefit. Managed services like AWS Lambda take more work than standardised container workloads.
What do you need from us?
Access to the existing systems, a business contact and clarity about compliance requirements. You don't need Kubernetes know-how — we bring it and pass it on during the knowledge transfer.
How are GDPR and NIS2 requirements implemented?
Through data stored in Austria or the EU, documented architecture and processes, encryption, access control, backup and restore procedures and traceable monitoring. If needed, security experts from Certitude Consulting review the platform.
What happens after go-live?
We keep running the platform, including monitoring, alerting, updates and backups — or we hand it over completely to your team, with documentation and enablement. Both are possible, without lock-in.
What can be added optionally?
Security audits and penetration tests, training and workshops, managed operations with on-call support, and further development of the applications themselves.
Let's get to know each other
In a free two-hour workshop we look at your situation and show what a move to the sovereign EU cloud could look like.
2 hours, free — including €200 Exoscale credit to try it out.