Data that has to stay in the EU
Data location, encryption and access control need to be verifiable properties of the system. A clause in a contract does not answer the question of where the data lives.
Industry
Public Sector & International Organisations
Where data resides, who can access it and which standards are demonstrably met are requirements here, not preferences. We have helped international organisations such as the IAEA move to the cloud, and we build platforms where data residency is a property of the system.
What this sector asks of a supplier
NIS2 and public-sector requirements
NIS2 scope and public-sector security requirements apply to the infrastructure, not only to the application on top. That is where hyperscaler setups can fall short.
A cloud move without hand-built environments
We helped the IAEA move to the cloud with infrastructure as code, for example Terraform, in place from day one, so environments are reproducible rather than configured by hand.
Certified processes
Our quality, information security and environmental management are certified to ISO 9001, 27001 and 14001, and every certificate is published at the foot of this page.
Technology and domain knowledge
Technology and requirements this work draws on.
- EU data residency
- NIS2
- ISO 27001
- Infrastructure as code
- Terraform
- Kubernetes
- GitOps
- Cloud migration
What we build and run here
Platforms and operations delivered from the EU under ISO 27001.
Sovereign platforms
EU data residency by architecture: data location, encryption and access control built in as properties of the system.
Cloud migration and repatriation
We move workloads to the cloud, or from AWS, GCP or Azure to EU sovereign infrastructure, in parallel with the existing environment until everything is verified.
Infrastructure as code and GitOps
Clusters, applications, secrets and policies in Git and reconciled automatically, so every change is reviewable, repeatable and reversible.
Fixed-scope audit
An infrastructure and cost audit with a fixed price and a fixed scope of 15 days, as a starting point before any commitment.
Managed operations
Monitoring, incident response, security patching and upgrades after go-live, with your team keeping full access and ownership.
24/7 support
Round-the-clock incident response for software in operation, with response targets agreed in the SLA.
Where does your data live?
Tell us about the system and the requirements it has to meet. We will come back with the right technical contact and a realistic next step.
Discuss my project
Book an introductory call (opens in a new tab)
Free, 30 minutes
