Cloud migration

Moving compute off a hyperscaler is the easy part. The difficulty is the managed services around it (the queue, the object store, the identity provider, the eleven Lambda functions nobody documented) and the egress bill on the way out.

So we start with an audit rather than a plan: what you run, what it costs, what holds data, what has an open-source equivalent and what has to be rewritten. You get that as a document, and if staying put is cheaper, the document says so.

The pattern that usually wins

Dedicated or virtual machines in Romania, Sweden or Germany, described in NixOS. PostgreSQL, MinIO and Redis run by you rather than rented. WireGuard between regions. Backups to a second provider in a second country, so losing a vendor is an inconvenience you can recover from.

The result is typically 40–70% cheaper per month and noticeably faster for European users. What clients mention most is that the bill no longer changes shape without warning.

Sovereignty, concretely

Data at rest in the EU or EEA. Providers incorporated in the EU or EEA, so foreign disclosure statutes have no jurisdictional hook. Encryption keys held by you. Each of these is written into the architecture document.