Swirl.SWIRL CLOUD
Your company cloud, on servers you control.
Swirl Cloud installs what a company otherwise assembles from a hyperscaler and several SaaS vendors on rented or owned bare-metal servers: application delivery, single sign-on, databases, monitoring, security and the Odoo ERP. Compliance evidence comes from the running platform, and the infrastructure costs the fixed monthly price of your servers, not usage billing.
Who it is for
Companies of 20 to 500 people that need a platform, a predictable bill and audit evidence, without a platform team of their own.
Companies without a platform team
Kubernetes distributions expect in-house platform engineers. The Swirl Cloud setup hub installs the platform, adds servers and verifies the result, and every alert links to its runbook.
Organizations under NIS2
Controls mapped to NIS2 Article 21 and evaluated continuously, and incident reports drafted with their deadlines: early warning within 24 hours, notification within 72 hours, final report within a month.
Financial entities and their ICT providers
Controls mapped to DORA and a signed evidence pack that auditors verify offline, for your own audits and for your clients’ supplier reviews.
Suppliers answering security questionnaires
Answer from facts: the list of external services and the data each receives, access reviews, vulnerability deadlines and monthly availability.
What one installation includes
One installation, managed from Git and organized in layers. Everything below is available today.
Servers and storage
Kubernetes on one or more Ubuntu servers, rented or owned, joined by a private network. Replicated Longhorn storage with optional encrypted volumes, and a daily recovery archive that can be encrypted and copied off site.
Access and identity
Keycloak single sign-on, in English and French, for every administration tool. Administrator rights are granted for 1 to 24 hours, approved, recorded and removed automatically.
Application delivery
GitLab for code, CI pipelines and the container registry; Argo CD deploys from Git to int, uat and prod environments. Each application joins through a declarative contract and a verified first deployment.
Data and secrets
PostgreSQL, MongoDB, Redis and Kafka, with separate credentials per environment. Vault holds the secrets and External Secrets delivers them to applications.
Monitoring and costs
Prometheus, Grafana and Elasticsearch, with dashboards per application. Every public address is probed against a 99.5% availability objective, and each server’s monthly cost is shown per environment and application.
Security operations
Vulnerability and configuration scanning (Trivy), code quality (SonarQube), CrowdSec and Fail2ban on exposed servers, admission policies, and alerts on suspicious logins, permission changes and secret access.
Compliance evidence
Controls mapped to NIS2, ISO/IEC 27001, DORA, GDPR and the CIS benchmarks, evaluated continuously, a signed evidence pack, access reviews, GDPR records of processing and a monthly report kept for 13 months.
Business applications
The Odoo ERP with single sign-on, including the CRM and live chat that handle this website’s inquiries.
How it is delivered
Ubuntu servers: a first server needs at least 8 cores, 32 GB of memory and 500 GB NVMe; 16 cores and 64 GB recommended.
Installed on your servers
On rented servers or on your premises, by your team or with Swirl. The setup hub, in English or French, checks the server, asks only what is needed, installs and verifies the result.
Run by your team
A runbook for every alert, a monthly report on availability, costs and compliance, and capacity planning that says what to add and when.
Operated by Swirl
Swirl installs and runs your platform on servers hosted in the EU.
On the roadmap
We publish a capability once the platform demonstrates it. In progress:
- A strict sovereignty mode with no mandatory non-EU service.
- Offline installation from a signed bundle, and platform upgrades in a single operation.
- Self-service projects with their own quotas, roles and databases.
Frequently asked questions
Where is our data stored?
On the servers you choose: rented from a European host, installed on your premises, or operated by Swirl on servers hosted in the EU. The platform keeps a list of every external service it contacts and the data each receives, and vendor telemetry is switched off.
Do we need Kubernetes skills?
Not to install it or run it day to day. The setup hub installs the platform, adds servers and verifies it; applications deploy from Git; every alert links to its runbook. Swirl can also install it with you, or run it for you.
How does Swirl Cloud help with NIS2 and DORA?
It produces the technical evidence: controls mapped to NIS2, ISO/IEC 27001, DORA and GDPR are evaluated continuously, a signed evidence pack is verified offline, and incident reports are drafted with the NIS2 and GDPR deadlines. Compliance also depends on your own policies and organization.
What does Swirl Cloud cost?
The infrastructure costs the fixed monthly price of your servers, with no usage billing, and the platform shows that cost per environment and application. Contact us for installation, operation by Swirl and support.
Can we leave Swirl Cloud?
The platform is built mainly on open-source components such as Kubernetes, PostgreSQL, GitLab, Keycloak and Odoo, and your data stays in their standard formats on your servers. A documented self-operation and exit runbook is in progress.