Forta

Sovereign cloud, built on solid ground.

We design and automate landing zones on Scaleway and STACKIT, and move your systems onto them from Azure, AWS or on-premises. Regulated organisations get to run sensitive workloads in the EU without giving up governance, security or control.

Start with a readiness assessment See services
Your data and systems stay in the European Union. Scaleway STACKIT
  • EU institutions and agencies
  • Public administration
  • Financial services
  • Regulated industries
  • SaaS vendors serving the public sector
  • Universities and research institutes

Sovereignty is now a requirement. The tooling hasn't caught up.

Hyperscalers come with mature frameworks and partner ecosystems. European providers offer excellent infrastructure, but the enterprise foundation around it is usually something you have to build yourself.

No enterprise blueprint

There is no equivalent of Microsoft's Cloud Adoption Framework for European clouds. Every team reinvents structure, access and guardrails, each in its own way.

Hybrid is the reality

Few organisations leave Azure or AWS entirely. The hard part is making identity, networking, logging and policy work as one across two clouds.

Regulators expect evidence

NIS2 and DORA require demonstrable security measures, and DORA also an exit strategy for ICT providers. Compliance has to be designed into the platform from day one.

Services

From first question to production platform.

Fixed-scope engagements with clear deliverables. Start small, decide with facts, scale when it makes sense.

Where to startHalf a day

Sovereign cloud workshop

€500 excl. VAT

Your goals, constraints and regulatory drivers, and an honest first view of which systems fit a European cloud and which don't.

You get a shortlist and a recommended next step.
Recommended start1 month

Readiness assessment

from €14,000 excl. VAT

Workload classification, service mapping and gaps, a three-year cost comparison, target architecture and a migration roadmap in waves.

You get a move, hybrid or stay decision backed by numbers. Fixed price.
Build3 months

Landing zone foundation

from €55,000 excl. VAT

Detailed design, organisation and project structure, single sign-on with the identity provider of your choice, networking, security baseline, logging and cost governance, all as code with CI/CD and guardrails.

You get a production-ready platform, runbooks and a trained team.
MovePriced per wave

Migration

Priced individually

Workloads moved wave by wave along the assessed roadmap, with rebuild, testing and cutover, and rollback plans agreed upfront.

You get workloads live with predictable risk.
OperateMonthly

Platform retainer

from €2,000 excl. VAT / month

Infrastructure code kept current as providers evolve, architecture guidance when you need it and a quarterly compliance review.

You get a platform that stays compliant.

Prices exclude VAT. The final quote depends on scope and team size.

Approach

Decide with evidence. Build once. Operate as code.

  1. Assess

    What moves, what stays, what it costs and which rules apply.

  2. Design

    Target architecture with identity, network and control model agreed upfront.

  3. Build

    Landing zone written in Terraform, reviewed in pull requests, deployed by pipeline.

  4. Migration

    Workloads moved in controlled waves, with a rollback plan.

  5. Hand over

    Your team owns the code and knows how to run it. Training is included.

Inside the landing zone

Everything a regulated workload expects on day one.

Delivered into your own repository. You own the code and need nothing from us to run it.

Identity · SSO with your IdP Network · private, segmented Security baseline · keys, secrets Observability · logs to SIEM Guardrails · policy as code prod workloads non-prod workloads sandbox experiments Azure AWS
Every landing zone is built in layers, as code, and sits alongside the platform you already run.

Identity and access

Single sign-on with the identity provider you choose, a clear role model, least privilege and break-glass procedures.

Network topology

Segmented private networks, controlled egress, VPN or interconnect to Azure, AWS and on-premises.

Security baseline

Encryption and key management, secrets handling, hardened defaults and audit logging.

Guardrails as code

Policy checks in the pipeline and drift detection, so governance holds even where the provider has no native policy engine.

Observability

Logs and metrics collected centrally and sent to the SIEM you use.

Cost governance

Tagging standards, budgets and alerts, with cost visible per project from the start.

Infrastructure as code

Terraform and Terragrunt modules, new projects created in a single pull request, pipelines in GitHub or GitLab.

Compliance mapping

Every control traced to ISO/IEC 27001, ready for your auditors.

Platforms

Neutral advice, deep platform skills.

We recommend the provider that fits your workloads and regulatory context, including when the right answer is to stay where you are.

France

Scaleway

Broad catalogue, strong GPU and AI capacity, developer-friendly tooling. Our primary focus.

Germany

STACKIT

Built for sovereignty, strong in public sector and enterprise workloads across the DACH region.

Migrating from

Azure and AWS

We move workloads from the hyperscaler you run today. Deepest expertise: Microsoft Azure, including enterprise-scale landing zone architecture.

Coming soon

Cost and compliance for European cloud.

One tool to price your environment, define the rules it must follow and prove that it does. Built by practitioners who design and audit cloud platforms every day.

  • Policy builderWrite a rule once, set provider-specific values per cloud, map it to ISO/IEC 27001 controls.
  • Continuous complianceSee which resources break which rules, ranked by severity, with evidence ready for audit.
  • Cost comparisonPrice a Scaleway environment and compare it with what you run on Azure today.

Launching with Scaleway and Azure. NIS2, DORA, AWS, GCP and STACKIT follow on the roadmap.

Join the early access list
regulis.cloud
PolicyControlStatus
Encryption at restData protectionA.8.24Active
Allowed regionsData residencyA.5.31Active
No public bucketsAccessA.8.3Active
Backups enabledResilienceA.8.13Active
Mandatory tagsGovernanceA.5.9Draft

Policy library: ready-made rules grouped by area, each linked to an ISO/IEC 27001 control.

Product preview. Figures are examples.

Who you work with

You work with an architect, not a salesperson.

Forta is led by Krzysztof, a senior cloud architect with a background at Microsoft and years of platform work for EU institutional and defence-sector programmes. The person who scopes your engagement is the person who designs it.

  • ISO/IEC 27001 Lead AuditorCompliance designed in, not added later
  • Microsoft Certified TrainerYour team learns as we build
  • Former Microsoft Customer Success ArchitectEnterprise-scale delivery
  • Azure landing zones, Terraform, Entra ID, SentinelHands-on, every engagement
  • EU institutions, defence, enterpriseRegulated environments

Questions and answers

Frequently asked questions.

What is a landing zone on a European cloud?

It is a ready, secure foundation for cloud workloads: organisation and project structure, identity and access, networking, security, logging and cost governance, all written as code. Scaleway and STACKIT have no official framework like Microsoft's Cloud Adoption Framework, so we build it from proven practice.

Can workloads move from Azure or AWS to Scaleway or STACKIT?

Yes. We start with a readiness assessment to see which systems can move as they are, which need rework and which are better left where they are. Migration happens in waves, with a rollback plan agreed upfront.

How much does a landing zone on Scaleway or STACKIT cost?

The initial workshop is €500, a readiness assessment starts at €14,000 and a landing zone build starts at €55,000 and takes about three months. All prices exclude VAT; the final quote depends on scope and team size.

Do I have to leave Microsoft Azure?

No. Most organisations move only selected, sensitive workloads to a European cloud and keep the rest on Azure or AWS. We recommend what fits your situation, including when the right answer is to stay with your current provider.

Who owns the infrastructure code?

You do. All code goes into your repository and your team is trained, so you don't depend on us to run the platform.

What is Regulis?

Regulis is our product for pricing and checking compliance of European cloud environments: a policy library, continuous ISO/IEC 27001 checks, audit evidence and an Azure to Scaleway cost comparison. It is in development and you can join the early access list.

Get started

Start with half a day. Leave with a plan.

Tell us what you're weighing. We'll reply within two working days with a proposal for a workshop or assessment.

contact@forta.cloud Warsaw, working across the EU

The data controller is MKR INVESTMENTS Krzysztof Rogalski. We use your details to answer your enquiry and prepare an offer (GDPR art. 6(1)(b)) and, if you tick the box, to send you service updates (GDPR art. 6(1)(a)). Details and your rights: privacy policy.

This opens your email app with the details filled in.

Company details and privacy policy

MKR INVESTMENTS Krzysztof Rogalski
ul. Mydlarska 21, 04-690 Warszawa, Poland
VAT ID: PL7742688573
Registered in CEIDG, the Polish business register
E-mail: contact@forta.cloud

Data controller

The controller of personal data sent through the form or by email is MKR INVESTMENTS Krzysztof Rogalski, ul. Mydlarska 21, 04-690 Warszawa, Poland. For data protection matters, write to contact@forta.cloud.

Purposes and legal bases

  • Answering your enquiry and preparing an offer, as steps taken at your request before entering into a contract (GDPR art. 6(1)(b)).
  • Follow-up on your enquiry and the establishment, exercise or defence of legal claims, as the controller’s legitimate interest (GDPR art. 6(1)(f)).
  • Sending email updates about our services and the Regulis launch, only with your consent (GDPR art. 6(1)(a) and art. 398 of the Polish Electronic Communications Law).

What data we collect and whether you must provide it

Name, organisation, email address and the content of your message. Providing them is voluntary, but without a name and email address we cannot reply. Marketing consent is entirely optional.

How long we keep data

Enquiry data is kept for 12 months after our last contact, unless a contract is signed, in which case it is kept for the contract term and the limitation period for claims. Data processed on the basis of consent is kept until consent is withdrawn.

Recipients

Data may only be shared with the providers we use for email and website hosting, under data processing agreements. We never sell data and do not use profiling.

Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object to processing based on legitimate interest. You can withdraw consent at any time without affecting the lawfulness of earlier processing. You may also lodge a complaint with the Polish data protection authority (Prezes Urzędu Ochrony Danych Osobowych).

Cookies

This site uses no cookies or analytics tools. Fonts are loaded from Google Fonts, which means your IP address is shared with Google.