Cloud & DevOps

Cloud migration with no standstill in operations

Cloud migration for Swiss companies: architecture, phased migration, CI/CD and operations. Data residency in Switzerland or the EU, in contract.

The Starting Point

Where cloud initiatives get expensive

The migration is rarely the problem. What comes after — cost, provability, dependency — decides whether the move was worth it.

The cloud bill grows faster than the business

Nobody can explain what the increase pays for. Resources keep running because nobody dares to switch them off.

Deployments are evening events

Releases happen manually, outside business hours, with a rollback plan in someone's head instead of a script. So they happen rarely.

You can't prove where your data lives

A customer or auditor asks for the storage location — and the answer requires a support ticket to your provider. For regulated industries that's a dealbreaker.

The exit is theoretical

The architecture depends on one provider's proprietary services. Switching would be a rebuild — which weakens your position at every contract renewal.

Security is a project, not a state

Permissions have grown historically, secrets sit in config files, and the last penetration test was two years ago.

There's no playbook for an outage

No defined on-call, no runbook, no recovery time anyone has signed off. In an incident, everyone improvises.

What We Deliver

Four focus areas across the full lifecycle

From the first assessment to ongoing operations. Each focus area can be engaged on its own — or as the whole journey.

Cloud migration & strategy

Migration to AWS, Azure or GCP with a plan that defines the way back first. We migrate workload by workload instead of in one leap — every step individually verifiable, every step individually reversible.

  • Landscape assessment with effort and risk rated per workload
  • Lift-and-shift, re-platforming or re-architecture — decided per workload
  • Zero-downtime migration via parallel running and staged cutover
  • Swiss regions (Zurich, Geneva) and EU regions for data-resident workloads
  • Exit path and cost model documented before the migration starts

AWS · Azure · GCP · Exoscale · Infomaniak · Terraform

Cloud infrastructure & security

Infrastructure as versioned code instead of console configuration that grew over time. Every environment reproducible, every change traceable — the foundation of any serious audit.

  • Infrastructure as Code with Terraform, Pulumi or AWS CDK
  • Kubernetes clusters (EKS, AKS, GKE) with autoscaling and network segmentation
  • Identity and access model (IAM) built on least privilege
  • Cloud security posture management, secret management and encryption
  • Controls aligned with ISO 27001, SOC 2 and — where relevant — FINMA

Terraform · Pulumi · Kubernetes · Vault · CSPM · OPA

DevOps & platform engineering

Delivery becomes routine instead of an event. We automate the path from commit to production and give your developers a platform where they reach infrastructure without filing a ticket.

  • CI/CD pipelines with GitHub Actions, GitLab CI or Azure DevOps
  • GitOps delivery with ArgoCD or Flux — the desired state lives in the repository
  • Internal developer platform (IDP) with self-service environments
  • Observability stack: metrics, logs, traces and alerting
  • SRE practice with defined service levels, on-call and runbooks

GitHub Actions · GitLab CI · ArgoCD · Prometheus · Grafana · OpenTelemetry

Managed cloud & DevOps

Ongoing operations when you don't want to build a platform team of your own. Monitoring, patching and cost control as a service — with agreed response times instead of best intentions.

  • Round-the-clock monitoring and on-call with a defined escalation path
  • Patch and update management for clusters, runtimes and dependencies
  • FinOps governance: rightsizing, reservations and a monthly cost report
  • Backup and recovery procedures, tested on a regular schedule
  • Monthly billing in CHF or EUR, cancellable quarterly

Datadog · PagerDuty · Grafana Cloud · AWS Cost Explorer · Azure Cost Management

Our Approach

Cloud migration in waves, not in one leap

Moving everything at once sounds faster and rarely is. We migrate in small waves with a defined rollback plan — the business keeps running through the entire transition.

Rollback plan per waveZero downtimeSwiss & EU data residencyInfrastructure as CodeFinOps from day 1
01

Assessment

We map workloads, dependencies, costs and regulatory requirements. The result is a chart with effort and risk per workload — not a blanket recommendation.

02

Target picture & landing zone

Account and network structure, access model, data locations and cost centres are set up before the first workload moves.

03

Migration in Waves

Workloads move in small waves, each with a test run, a cutover window and a rollback plan. The business stays available throughout the migration.

04

Operations & Optimization

After the move we take over monitoring, patching and cost optimization — or hand over to your team, runbook and onboarding included.

Outcomes

What changes for you

Four things that are different after a clean cloud and DevOps setup.

Costs you can explain

Resources are mapped to cost centres and idle capacity becomes visible. You get a monthly cost report your finance team can actually follow.

More frequent, calmer releases

Automated pipelines with tests and rollback move deployments into the working day. Smaller changes mean smaller risks.

Provable data residency

You can tell a customer, an auditor or a regulator in writing which region holds which data and who can access it.

Outages with a defined playbook

Monitoring, alerting, on-call and runbooks are established and rehearsed. Recovery time is an agreement, not a hope.

Take Stock

Where does your cloud landscape stand today?

We'll review cost structure, data locations and delivery pipeline and name the three biggest levers — no obligation, no sales pressure.

Request an assessment
Proof

From a European engagement

Palisis of Switzerland is our strongest European reference — here is the infrastructure and security side of the project.

Your Safeguards

Portability, data location and access — settled in the contract

In cloud engagements the critical question isn't IP, it's dependency. So we settle it first.

No lock-in — as an architecture principle

We build on Kubernetes, Terraform and open standards. Managed services are used deliberately, with a documented replacement path. Switching stays a decision, not a rebuild.

Swiss and EU data locations

Operations in Swiss regions (Zurich, Geneva) or EU regions — including Swiss providers such as Exoscale and Infomaniak where the requirement goes beyond the EU.

Auditable from day one

Infrastructure as code, logged access and versioned changes. ISO 27001 and ISO 9001 certified, SOC 2 Type II audited.

Your accounts, your keys

The cloud accounts run in your name and your contractual relationship. We work inside them with assigned permissions — and when the engagement ends, you revoke the access.

Technology

Platforms, tools & providers

We're tied to no hyperscaler and take no reseller margins. The recommendation follows your requirements on data location, cost and existing know-how.

AWS Azure GCP Exoscale Kubernetes Terraform Pulumi ArgoCD GitHub Actions Prometheus Grafana Datadog Vault Docker
FAQ

Common questions about cloud migration and operations

The points that come up in every procurement process — answered up front.

Can our data stay in Switzerland during a cloud migration?

Yes. AWS, Azure and GCP operate Swiss regions (Zurich, Geneva); we also work with Swiss providers such as Exoscale and Infomaniak. Which data lives where is recorded in the operations handbook, so you can prove it to customers and regulators. Data processing is governed under revDSG and GDPR.

How do you avoid lock-in with one cloud provider?

By making portability an architecture decision: containers instead of provider-specific runtimes, Terraform instead of console clicks, open data formats. We use managed services where they bring clear value — but with a documented replacement path, so a switch stays a calculable move.

What do operations cost, and how do you bill?

Cloud costs run directly through your own accounts — you see them unfiltered and we add no margin. Our work is billed separately: a project price for migration and build-out, a monthly flat rate for managed operations, in CHF or EUR and cancellable quarterly.

Do you run the platform or build it for our team?

Both are possible, and we recommend deciding only after the assessment. If you have a platform team, we build the platform and hand it over with a runbook and onboarding. If you don't, we operate it — with the option to hand over later.

How fast do you respond to an incident?

Response times are agreed in the service contract and tiered by severity, with round-the-clock on-call through the teams in Udaipur and Pune. We deliberately quote times we can hold at 3 a.m. — not the shortest number that reads well.

Explore Further

Related services

Cloud costs and data residency under control?

A 30-minute call with a cloud architect. We'll look at your landscape and tell you where the biggest lever is — even if it isn't with us.

Book a Consultation