Cloud platform for energy operators — NIS2-aligned, edge-ready, sovereign by architecture

Open-source Cozystack (CNCF project, created by Ænix) → Ænix Public Cloud, Private Cloud and AI Platform → Ænix builds, operates and migrates them.

A cloud platform for energy operators is a sovereign, NIS2-aligned infrastructure that runs consistently across headquarters, regional control centres, and substation edge under one Kubernetes operational model. It serves electricity, gas, oil, and heating operators classified as essential entities under NIS2 Annex I, who must run grid-data analytics, AI forecasting, and OT systems on critical-infrastructure that depreciates over decades. Ænix applies this pattern using Cozystack, an open-source CNCF Sandbox project that unifies virtual machines and containers on one Kubernetes API, supports air-gapped installs, and runs on customer hardware. Ænix sells Ænix Private Cloud Platform (quoted per RFP) plus platform-engineering services on top.

Quick facts

  • What it is A sovereign, NIS2-aligned cloud platform for energy operators spanning HQ, regional control centres, and substation edge under one Kubernetes operational model
  • Licence Apache 2.0 (no per-CPU / per-core licensing)
  • Status Cozystack is a CNCF project (Sandbox since 2025-02-28; Incubating application in due diligence)
  • Who it is for Electricity, gas, oil, and district-heating operators classified as NIS2 essential entities under Annex I
  • Key capability Multi-site architecture (central control + regional sites + substation edge) with air-gapped OT boundary and AI infrastructure for grid forecasting
  • Regulatory scope NIS2 Article 21 risk management and Article 23 incident reporting, plus member-state sectoral overlays (BSI, ANSSI) and UK equivalents (NCSC). AENIX s.r.o. holds ISO/IEC 27001:2022 for its own ISMS
  • Engagement timeline Fixed-price Platform Readiness Assessment (14 or 28 days) first, then a 3–12 month build depending on scope, with multi-site rollouts phased site by site

Energy operators in 2026 face a specific combination of pressures: NIS2 essential-entity classification (energy is in scope), sovereign-cloud requirements for critical-infrastructure data, edge compute at substations and generation sites, AI-driven grid optimization and forecasting, and the operational reality that hardware refresh cycles for grid infrastructure are measured in decades, not years. The architectural answer is a coherent platform that runs at HQ, regional control centres, and substation edge — under one operational model with NIS2-aligned controls.

Ænix applies a multi-site platform pattern built to support NIS2, with emphasis on IT/OT convergence, edge resilience, and air-gap support for OT systems. AENIX s.r.o. holds ISO/IEC 27001:2022 certification for its own ISMS.

Pairs with: Ænix Private Cloud Platform for NIS2-aligned multi-site architecture with air-gap option for OT; AI Platform for grid-optimization AI workloads.


What energy operators come to us for

  • NIS2 compliance for cloud and OT infrastructure — energy is essential-entity under Annex I; Article 21 risk management and Article 23 incident reporting apply
  • Sovereign cloud for grid and customer data — critical-infrastructure data with sectoral residency requirements
  • Smart grid platform consolidation — multiple legacy systems integrated under one Kubernetes-native control plane
  • AI for grid optimization, forecasting, predictive maintenance — sustained workloads on customer hardware
  • VMware exit / OpenStack modernization — many energy operators have legacy virtualization that needs modernization
  • Edge compute at substations / generation sites — distributed control plane with central policy

Why energy architecture is different

  • Edge compute is core, not optional — substations, distributed generation, microgrids all need local compute with intermittent central connectivity
  • OT/IT convergence is structural — operations technology (SCADA, DCS, RTUs) meeting IT cloud-native infrastructure requires careful boundary design
  • Long depreciation cycles — grid hardware lasts decades; the platform must work across multiple hardware generations
  • Critical-infrastructure security model — kinetic + cyber threats; air-gap for OT systems is often non-negotiable
  • Regulatory triple stack — NIS2 + sectoral energy regulations (national + EU) + cybersecurity-specific (NCAs)
  • Mission-critical reliability — outages have public-safety implications; redundancy (N+1 or more) has to be designed in and rehearsed

Cozystack pattern for energy operators

  • Multi-site — central control + regional sites + substation edge under one Kubernetes API
  • Air-gap for OT — Cozystack has a documented air-gapped install workflow
  • Multi-tenant — separate generation / transmission / distribution / customer-facing workloads
  • AI infrastructure — for grid forecasting, demand response, predictive maintenance
  • Sovereign by architecture — open-source platform on customer hardware, opt-in volume encryption
  • Long-horizon platform — Apache 2.0 licence + community governance suit decade-plus operational planning
Central control
One Kubernetes APICentral policy
sets policy for
Regional sites
Regional aggregation
extends to
Substation edge
Local computeTolerates intermittent connectivity
air-gapped from
OT systems
SCADADCSRTU

Companies running platforms built with Ænix

Hosting providers running Ænix Public Cloud Platform in production

Hosting providers running Ænix Public Cloud Platform in production. Energy-sector customers are not named; nine published case studies are written up in anonymized form, including a three-data-centre provider platform that shows the multi-site pattern.


Industry context

  • NIS2 essential-entity scope — Annex I covers electricity (production, transmission, distribution), gas, oil, district heating/cooling, hydrogen
  • Member-state sectoral overlays — Germany BSI energy-sector requirements; France ANSSI sovereign cloud for critical operators; the UK’s NCSC guidance as the non-EU equivalent; similar bodies in other markets
  • EU grid digitalization initiatives — ENTSO-E and ENTSO-G data exchange platforms; Smart Grid Architecture Model (SGAM) reference architecture
  • AI in energy — grid forecasting, demand response, predictive maintenance increasingly using ML on grid-operational data; data residency and IP-protection are real constraints

Ready to scope your build? Book a call →

How Ænix engages with energy operators

Standard Platform Readiness Assessment with energy-specific workstream emphasis:

  • NIS2 + sectoral compliance gap — Article 21/23 mapped to current architecture
  • Multi-site architecture — central + regional + substation edge under one operational model
  • OT/IT boundary design — air-gap or restricted-egress patterns for OT systems
  • Smart-grid platform consolidation — legacy SCADA / DCS / GIS / energy-management systems integration
  • AI infrastructure for grid use cases — forecasting, demand response, predictive maintenance

The build then typically runs 3–12 months depending on scope, with multi-site rollouts phased site by site.


Procurement readiness

We accept RFI / RFP through:

  • EU member states — TED, national e-procurement portals
  • Kazakhstan and Central Asia — goszakup.gov.kz, mitwork.kz, zakup.sk.kz
  • Energy-sector-specific procurement frameworks — discussed during discovery call

How to start

Or read more:


Ænix created Cozystack (CNCF Sandbox project, CNCF Certified Kubernetes distribution, OpenSSF Best Practices) and co-maintains it with maintainers from other companies. On top of it we offer three platforms — Public Cloud, Private Cloud and AI — for organizations across the EU, DACH, and Central Asia.

Frequently asked questions

Is energy in scope for NIS2?

Yes. Energy is an essential-entity sector under NIS2 Annex I, covering electricity (production, transmission, distribution), gas, oil, district heating and cooling, and hydrogen. Article 21 risk-management obligations and Article 23 incident-reporting requirements apply to operators in these categories.

Does Cozystack support air-gapped deployments for OT systems?

Yes. Cozystack has a documented air-gapped install workflow. For energy operators, this allows a restricted or fully isolated OT boundary for SCADA, DCS, and RTU systems while IT and analytics workloads run under the same Kubernetes operational model.

How does the platform run at substations and remote generation sites?

The architecture uses a multi-site pattern: central control plus regional aggregation plus a substation edge tier, all under one Kubernetes API. Edge sites run local compute with central policy and tolerate intermittent connectivity, which suits distributed generation and microgrids.

Why does an open-source platform suit grid infrastructure?

Grid hardware depreciates over decades, so the platform must outlast multiple hardware generations. Cozystack is Apache 2.0 with CNCF community governance and runs on customer hardware, avoiding per-core licensing and vendor lock-in across decade-plus operational planning horizons.

What does Ænix sell, and how is it different from Cozystack?

Cozystack is the open-source CNCF platform foundation, created and co-maintained by Ænix. Ænix sells platform subscriptions (support, commercial modules and services) — Ænix Private Cloud Platform is quoted per RFP after a Platform Readiness Assessment — plus platform-engineering services.

How does an engagement start?

It starts with a fixed-price 14- or 28-day Platform Readiness Assessment that maps NIS2 and sectoral compliance gaps, multi-site architecture, OT/IT boundary design, smart-grid consolidation, and AI infrastructure for grid use cases. The build then typically runs 3–12 months depending on scope, with multi-site rollouts phased site by site.

Ready to talk?

Book a 30-minute discovery call — no commitment. We confirm fit, the right platform, and the next steps.