arrow_circle_right Noviarc – Spyrosoft cloud foundry
Lower total cost of ownership – on a platform you own
Most Kubernetes migrations run as open-ended consulting projects, and the licence bill keeps climbing long after go-live. NoviArc, our in-house migration engine, is productised and AI-assisted: it moves you onto a sovereign, cloud-native platform for a fraction of the usual cost – and consolidation keeps cutting your run rate month after month.
arrow_circle_right MIGRATION AND DISCOVERY
A faster, lower-risk way to get there
up to 80%
lower audit price than a traditional discovery
~$1 million a year
cloud spend saved on a single client engagement
weeks
to production
AI-assisted
with architect approval
arrow_circle_right WHY NOW?
The requirements have shifted
Four forces have turned platform choices from a technical detail into a board-level, auditable decision.
Cost pressure
Managed-service and per-core licence bills grow with scale. FinOps reviews increasingly flag cloud as a rising, hard-to-predict share of IT spend.
Lock-in risk
Provider-specific services quietly narrow your future options. Moving a workload later can become a re-platforming project, rather than a configuration change.
Sovereignty and residency
Regulators and customers now ask where data lives and who can compel access. An EU subsidiary of a US parent may still fall within the US CLOUD Act scope – a point your documentation needs to address.
Personal accountability
Since December 2025, NIS2 – and DORA in financial services – make demonstrable risk management a management-body issue, with real fines attached.
arrow_circle_right COMPARISON OF OPTIONS
See how the options compare
Three principles now have to hold at once: sovereign, portable, and production-ready.
arrow_circle_right THREE MAIN PRINCIPLES
Why NoviArc?
NoviArc – Spyrosoft Cloud Foundry is designed to address sovereignty, portability and production readiness at the same time.
Sovereign
Control where your workloads run, who can access them and which ownership chain applies to your infrastructure.
Portable
Build on upstream Kubernetes and open technologies, so your workloads aren’t tied to one provider or proprietary platform.
Production-ready
Start with an integrated, hardened and observable platform rather than assembling and securing the stack yourself.
arrow_circle_right HOW NOVIARC USES AI
AI does the discovery – humans approve it
Analysis is often what stalls a migration. NoviArc uses AI to accelerate the repetitive work behind discovery and planning, while keeping every decision under human control.
AI does the heavy lifting
An agent scans your estate, maps dependencies, breaks down costs per service, and flags third-country access exposure – work that can otherwise take architects months of manual analysis.
People own the decisions
Every output is reviewed and approved by Spyrosoft architects and security engineers. AI never has the last word – that is your protection against error, and part of your audit trail.
arrow_circle_right THE PROCESS
Three steps from where you are to where you want to be
Audit
The agent scans your existing infrastructure and produces a complete, machine-readable inventory of resources, dependencies, costs, and risks.
- Every managed service identified and classified
- Cost per service benchmarked against a European-operator equivalent
- Third-country access exposure flagged at component level, where relevant
Mapping
Each service is mapped to an open, portable equivalent on NoviArc, creating a substitution plan with a savings estimate. Your architects sign it off before any code changes are made.
- Managed functions → containerised workloads on upstream Kubernetes
- Managed databases → self-managed equivalents on EU infrastructure
- External CDN or WAF → in-jurisdiction open-source ingress, where required
Migration
The agent generates the plan as code: GitOps manifests, Helm charts, and a test suite. Execution is supervised and incremental, so you validate each stage before the next begins.
- Repeatable – the same process moves your first workload and your tenth
- De-risked – automated tests validate behaviour before cutover
- Auditable – every step is a Git commit with a clear change record
arrow_circle_right THE DESTINATION
A platform you own
You move from compliance and cost pressure to a production-ready platform on the infrastructure you choose. Sovereignty is addressed, costs are brought under control, and the migration is powered by NoviArc, our migration engine.
Sovereign by ownership
Deployed on the infrastructure you choose, with no US entity in the ownership chain where sovereignty requires it – giving auditors and the board a clear answer.
Cloud-native and agnostic
Upstream Kubernetes, deployed to the infrastructure of your choice and designed to run consistently across OVHcloud, Scaleway, on-premises environments, and hyperscalers.
Cost-optimised
Suitable workloads move onto a right-sized cluster, often on the same cloud. One engagement saved $1M a year, and migration costs can be up to 80% lower.
Production-ready in weeks
More than 20 integrated open-source components, hardened and observable from day one.
arrow_circle_right HOW WE START
A fixed-price discovery audit
You get a clear price up front, set 20–40% below a traditional assessment. If you sign a migration project with us, we credit the audit fee against it, so the first step costs you next to nothing when we move forward together.
-
Up to ~15 workloads, one cloud
- ~1 week
- Cloud architect
- Inventory, target architecture, and roadmap
-
~16–60 workloads, hybrid
- ~2–3 weeks
- Architect and security engineer
- Includes security and compliance findings
-
60+ workloads, regulated estate
- ~4–6 weeks
- Architect, security engineer, and technical lead
- Full security review and threat model
arrow_circle_right WHAT’S INSIDE
20+ components, fully integrated
NoviArc integrates, hardens, and configures more than 20 mature open-source components (the same ones hyperscalers run) into a production-ready platform.
Operations and delivery
- GitOps delivery (Flux CD)
- AI-assisted site reliability engineering (SRE) agent
- Autoscaling and self-healing
- Declarative environments
Observability
- Prometheus metrics
- Grafana dashboards
- OpenTelemetry observability framework
- Alerts to Slack, Teams, or email
Data and storage
- PostgreSQL operator (HA)
- Valkey or Redis operator
- S3-compatible object storage
- Automated backups
Security and compliance
- Built-in CIS hardening
- Harbor container registry
- Kubescape (CIS / NSA)
- Trivy image scanning
Identity and access
- SSO / MFA (AD, Entra ID)
- Role-based access control
- OpenBao secrets management
- Full audit trail
Networking and ingress
- HAProxy or Traefik ingress
- Load balancing
- EU-native WAF / CDN option
- Upstream Kubernetes, fully portable
arrow_circle_right IS THIS FOR YOU?
When NoviArc is not the right fit
We would rather tell you now than six weeks into a project. NoviArc is probably not for you if:
You are a small team that is happy on a single managed platform, and cost is not yet material.
You want a fully hands-off product with no platform team or partner involved.
You only need a few functions on a serverless model, rather than a container platform.
Under NIS2 pressure? Here’s the answer
arrow_circle_rightCONTACT US
Book a free 30-minute Workload & TCO session
We will review your estate, identify the biggest cost and sovereignty opportunities, and recommend the right audit scope.
Filip Rozanski
Head of Managed Services