Ænix Private Cloud Platform for regulated enterprises – Ænix

Open-source Cozystack (CNCF project, created by Ænix) → Ænix Public Cloud, Private Cloud and AI Platform → Ænix builds, operates and migrates them.
Private and hybrid sovereign cloud for regulated organizations that run cloud for themselves. Multi-site designs, DORA- and NIS2-aligned architecture, and coexistence with VMware, OpenNebula and OpenShift while you migrate — on hardware you control. Developer self-service and engineering training are part of the platform, not a second purchase.
Stretched and multi-site designs across two or more data centres, with synchronous replication where the design calls for it — a Swiss provider runs one across three data centres. There is no automated cross-site VM failover: site failover is a runbook that we design and rehearse with you, and backups go to storage outside the cluster they protect. See the DORA evidence page for what the platform provides and what it does not.
The platform is built for coexistence, not rip-and-replace. It runs next to existing VMware Cloud Foundation, OpenStack, OpenNebula and OpenShift estates while workloads move at their own pace; a financial group in Asia runs one self-service portal over OpenNebula, VMware and Kubernetes.
The DORA evidence page maps each article to what Cozystack provides, what you configure, and what is not provided.
Customer-controlled hardware in a customer-controlled jurisdiction. Air-gapped operation supported (no internet egress required). Ænix engineers work on your environment only with your approval.
Volume encryption at rest is opt-in per storage class, and backups can be encrypted and sent to storage you control. The key-management process — who holds keys, rotation, dual control — is designed with you during the build. The GDPR evidence page describes the current mechanics and their limits.
Audit logs in VictoriaLogs with configurable retention (default 30 days), exportable to your SIEM and to an immutable archive you control for the retention your regulator expects.
Tenant CRD with quota / RBAC / observability per workload. Tenant boundary enforced at network, identity, storage, observability layers — not just namespace.
Engineering team training as part of the engagement, plus monthly training hours on every support tier. On Plus and Enterprise, one full Kubernetes Deep Dive Course per year is included, covering the Cozystack stack (Talos, LINSTOR, Cilium, KubeVirt, Cluster API, Flux).
The support tier is chosen during scoping, from the same tiers as the price list: response times down to 1 hour on Enterprise, 24×7 from Plus, compliance audit support from Plus. The platform supplies control evidence for your own ISO 27001 or SOC 2 work; Ænix does not certify your organization. Ænix itself holds ISO/IEC 27001:2022 for its own information security management. Ænix engineering teams are in the EU and Central Asia; EU contracts are signed with AENIX s.r.o.
Included in the platform rather than sold as a second product, and switched off for organizations that do not want it. It turns the multi-tenant substrate into something your engineers touch directly:
The Tenant CRD that carries the compliance boundary is the same object that carries the team or squad model, so a self-service environment is isolated by the control the auditor already accepted. Against building this on Backstage: Backstage is a UI framework and you still supply the cloud underneath — here the foundation and the layer above it arrive together.
The three Ænix platforms are the same engine with different surfaces switched on, so they compose rather than compete. Nothing below is a separate installation or a second procurement.
The practical consequence: choosing Private Cloud Platform now does not foreclose anything later. Adding GPU tenancy or a customer-facing commercial layer is a configuration decision on the platform you already run.
Quoted per RFP after a discovery call and a Platform Readiness Assessment. The published support tiers are for Public Cloud Platform and self-run Cozystack; a Private Cloud programme includes the tier chosen during scoping.
Discuss Private Cloud Platform →
Platform Readiness Assessment →
Nine case studies are published in full, anonymized by contract but with architecture and figures intact — including a private cloud inside a bank and one portal over OpenNebula, VMware and Kubernetes for a financial group. Reference calls with existing customers can be arranged under NDA for an active opportunity.
Tell us your regulatory context (DORA / NIS2 / sectoral), current architecture, and sovereignty requirements — we reply by email and set up a focused architecture review with an Ænix engineer to confirm platform fit. To talk first, book a 30-minute call in the calendar.
Form not loading? Email [email protected].
Prefer a shorter first step? Book a discovery call instead.
Ænix Private Cloud Platform is built on Cozystack — a CNCF project Ænix created and maintains with maintainers from other companies (currently CNCF Sandbox; CNCF Incubating application in due diligence). Apache 2.0.
Book a 30-minute discovery call — no commitment. We confirm fit, the right platform, and the next steps.
Turnkey cloud platform.Built on Cozystack.
© 2026 Ænix, All Rights Reserved · Privacy policy · Cookie settings
AENIX s.r.o., U Trojice 2661/1e, 370 04 České Budějovice, Czech Republic · Company ID (IČO) 21493871 · VAT CZ21493871AENIX INC, 131 Continental Drive, Suite 301, Newark, DE 19713, United States · Delaware file no. 10075938