
Your data.
Your country.
Your rules.
Data residency in Italy and the European Union, on infrastructure certified ISO/IEC 27001, 27017, 27018 and ISO 9001. Four options with clear jurisdiction: global cloud in EU regions, European cloud outside US jurisdiction, private cloud in Italy, or on-premises managed by us. You choose, we design.
Distributed, redundant,
certified
Our infrastructure is distributed across Microsoft Azure’s European regions, with full fault-tolerant architecture. If one site has a problem — power outage, fire, flooding — the others keep running without interruption. Your data is always available, always replicated, always protected.
Five Microsoft Azure regions, three independent availability zones per region, no single point of failure. An architecture designed never to stop.
Microsoft Azure regions in Italy, Ireland, the Netherlands, France and Germany. Three physically separate availability zones per region.
ISO/IEC 27001, 27017, 27018 and ISO 9001. Information security, cloud protection and personal data.
Uptime target even during maintenance. Fully redundant power and cooling.
Protection
at every level
End-to-end encryption
Controlled access
Continuous monitoring
GDPR and data sovereignty
NIS2 Directive
ACN qualification
Four options, one choice
You choose where your
data lives.
For each option we state two separate things: where the data physically sits and who has jurisdiction over the provider. We design the architecture around your requirements, not around a brand. The infrastructure types, the jurisdiction of each and the measures against international governmental access are on the contractual page Jurisdiction.
Global cloud
Data centres in the EU · US-based group
Five EU regions, three availability zones per region, EU Data Boundary, DPF and SCC safeguards. Scale, platform services and native integration with Microsoft 365.
For those who want scale and platform, with data that stays in Europe.
European cloud
Data centres in the EU and Switzerland · Swiss group
Virtual machines, backup and disaster recovery on a managed European cloud, also in a hybrid setup with a node at your premises. Outside US jurisdiction.
For those who want to stay in Europe without giving up a managed cloud.
Private cloud in Italy
Data centres in Italy · Italian group
Dedicated private cloud, with resources reserved for you, in Italian data centres. Exclusively Italian jurisdiction, no transfer outside the country.
For regulated sectors and for those who must prove that data never leaves Italy.
Managed on-premises
Your premises · no third-party provider
Hardware at your site, with the most suitable hypervisor among those we support, managed remotely by us, with off-site backup and continuous monitoring.
For contractual or latency constraints, or when the servers already exist and just need to be run well.
How we choose together
Five questions, before any quote.
In most cases the answer is hybrid: identity and collaboration on the global cloud, sensitive data in Italy, backup outside US jurisdiction. We design the combination with you and run it as a single system.
Regulation and data types
Healthcare, finance, public sector, defence and tenders with residency clauses decide jurisdiction before anything else.
Identity and Microsoft 365
If people live in Teams, Exchange and Entra ID, Azure reduces integrations and running costs.
Latency and sites
Machinery, warehouses and applications that cannot tolerate delay stay close to the people who use them.
Total cost over time
Licences, traffic, management and redundancy matter more than the price of a single virtual machine.
Exit and reversibility
Categories of exportable data, timelines and costs to leave are written into the contract before you sign.
Who runs what
Full service, architecture only, consulting only, or management of what you already have.
Frequently asked questions on data residency and jurisdiction
The questions we hear before deciding where data should live.
Yes, in two ways. The first is a dedicated private cloud in Italian data centres owned by an Italian group: exclusively Italian jurisdiction, no transfer outside the country. The second is on-premises: hardware at your site, managed by us, with off-site backup on Italian infrastructure as well. In both cases data residency is written into the contract and verifiable.
Yes. We use five EU regions (Italy, Ireland, the Netherlands, France and Germany), each with three availability zones, and customer data stays within Microsoft’s EU Data Boundary. It should be said plainly that Microsoft is a US group: the physical location of the data is European, the corporate jurisdiction is not. That is why transfers are covered by the EU-US Data Privacy Framework and standard contractual clauses, with a documented Transfer Impact Assessment. For most companies this is an adequate balance; for some sectors it is not, and that is what the other three options are for.
Because a provider is subject to the laws of the country where the company is based, not only those of the country where the servers are. A data centre in Germany run by a US group remains, in principle, subject to requests from US authorities; the same data centre run by a Swiss or Italian group is not. That is why each option states two things separately: where the data is and who has jurisdiction over the provider. What weighs on the choice is your sector’s regulation, the data you process, your customers’ requirements and the constraints of the tenders you take part in.
It is the most common case. A typical architecture keeps identity, email and collaboration on Microsoft 365 and Azure, sensitive data or ERP systems on a private cloud in Italy, and backup or the disaster recovery site on the European cloud, outside US jurisdiction. Or, for those who already have on-site servers, on-premises for the workloads that must stay close to people and cloud for everything else. We design the whole and run it as a single system, with a single point of contact.
The global cloud is Microsoft Azure, in its European regions. The European cloud is Acronis, a Swiss group with data centres in the EU and Switzerland, on which we deliver virtual machines, backup and disaster recovery. The private cloud in Italy runs on Aruba, with VMware vCloud Director, in Italian data centres. For on-premises we work with VMware, Hyper-V, Nutanix, Proxmox and Acronis. We name them here and not in the rest of the page because the choice starts from your requirements, not from a brand: if a constraint calls for a different provider, we integrate it through our partners.
The exit strategy is written into the contract from the start, as ISO/IEC 27001, 27017 and 27018 require: categories of exportable data, timelines, costs and certified data deletion. Virtual machines are portable between hypervisors, backups can be restored on infrastructure other than the original, and your identities remain yours. Changing option, or combining them differently, is an ordinary project, not a negotiation.
MIMIT Cloud and Cybersecurity Voucher 2026
This service is eligible for the voucher: a 50% non-repayable grant.
AtWorkStudio is an approved supplier. The grant covers 50% of the expenditure, up to €20,000, as a direct purchase or a subscription of at least 24 months. The application must be submitted before buying: drafting opens on 20 October 2026, submissions from 10 November 2026 to 20 January 2027, first come first served.
Codes to enter in the application
VCCFA2600000145-C9
Do you know where your company's data resides?
We analyse your current infrastructure and show you where your data is, how it is protected and what is needed for GDPR and NIS2 compliance. Start with a free assessment or contact us directly.