European data centres with ISO 27001 certification

Your data.
Your country.
Your rules.

Data residency in Italy and the European Union, on infrastructure certified ISO/IEC 27001, 27017, 27018 and ISO 9001. Four options with clear jurisdiction: global cloud in EU regions, European cloud outside US jurisdiction, private cloud in Italy, or on-premises managed by us. You choose, we design.


Distributed, redundant,
certified

Our infrastructure is distributed across Microsoft Azure’s European regions, with full fault-tolerant architecture. If one site has a problem — power outage, fire, flooding — the others keep running without interruption. Your data is always available, always replicated, always protected.

Five Microsoft Azure regions, three independent availability zones per region, no single point of failure. An architecture designed never to stop.

5 countries

Microsoft Azure regions in Italy, Ireland, the Netherlands, France and Germany. Three physically separate availability zones per region.

4 ISO

ISO/IEC 27001, 27017, 27018 and ISO 9001. Information security, cloud protection and personal data.

99.995%

Uptime target even during maintenance. Fully redundant power and cooling.

Security and compliance

Protection
at every level

End-to-end encryption

Data encrypted in transit (TLS 1.3) and at rest (AES-256). Cryptographic keys compliant with FIPS 140-2 standards, with automatic rotation.

Controlled access

Multi-factor authentication, privileged access management and network segmentation. Least privilege principle enforced on every resource.

Continuous monitoring

Behavioural analysis, anomaly detection and automated incident response. Every operation is tracked, auditable and compliant with ISO 27001 requirements.

GDPR and data sovereignty

Data residency in EU data centres with EU-US DPF and SCC safeguards. For full sovereignty, Italian-only infrastructure with no exposure to non-EU jurisdictions.

NIS2 Directive

Infrastructure designed for Directive (EU) 2022/2555: risk management, incident notification, operational continuity and security governance.

ACN qualification

ATWS Secure Workspace is listed in the ACN Cloud Catalogue (Italian National Cybersecurity Agency). Available for businesses and public administration.

Four options, one choice

You choose where your
data lives.

For each option we state two separate things: where the data physically sits and who has jurisdiction over the provider. We design the architecture around your requirements, not around a brand. The infrastructure types, the jurisdiction of each and the measures against international governmental access are on the contractual page Jurisdiction.

Global cloud

Data centres in the EU · US-based group

Five EU regions, three availability zones per region, EU Data Boundary, DPF and SCC safeguards. Scale, platform services and native integration with Microsoft 365.

For those who want scale and platform, with data that stays in Europe.

European cloud

Data centres in the EU and Switzerland · Swiss group

Virtual machines, backup and disaster recovery on a managed European cloud, also in a hybrid setup with a node at your premises. Outside US jurisdiction.

For those who want to stay in Europe without giving up a managed cloud.

Private cloud in Italy

Data centres in Italy · Italian group

Dedicated private cloud, with resources reserved for you, in Italian data centres. Exclusively Italian jurisdiction, no transfer outside the country.

For regulated sectors and for those who must prove that data never leaves Italy.

Managed on-premises

Your premises · no third-party provider

Hardware at your site, with the most suitable hypervisor among those we support, managed remotely by us, with off-site backup and continuous monitoring.

For contractual or latency constraints, or when the servers already exist and just need to be run well.

Global scale → Full control

How we choose together

Five questions, before any quote.

In most cases the answer is hybrid: identity and collaboration on the global cloud, sensitive data in Italy, backup outside US jurisdiction. We design the combination with you and run it as a single system.

  • Regulation and data types

    Healthcare, finance, public sector, defence and tenders with residency clauses decide jurisdiction before anything else.

  • Identity and Microsoft 365

    If people live in Teams, Exchange and Entra ID, Azure reduces integrations and running costs.

  • Latency and sites

    Machinery, warehouses and applications that cannot tolerate delay stay close to the people who use them.

  • Total cost over time

    Licences, traffic, management and redundancy matter more than the price of a single virtual machine.

  • Exit and reversibility

    Categories of exportable data, timelines and costs to leave are written into the contract before you sign.

  • Who runs what

    Full service, architecture only, consulting only, or management of what you already have.

Frequently asked questions on data residency and jurisdiction

The questions we hear before deciding where data should live.

MIMIT Cloud and Cybersecurity Voucher 2026

This service is eligible for the voucher: a 50% non-repayable grant.

AtWorkStudio is an approved supplier. The grant covers 50% of the expenditure, up to €20,000, as a direct purchase or a subscription of at least 24 months. The application must be submitted before buying: drafting opens on 20 October 2026, submissions from 10 November 2026 to 20 January 2027, first come first served.

Codes to enter in the application

  • VCCFA2600000145-C9

Do you know where your company's data resides?

We analyse your current infrastructure and show you where your data is, how it is protected and what is needed for GDPR and NIS2 compliance. Start with a free assessment or contact us directly.