Cloud platform for financial services — DORA-aligned, sovereign, AI-ready

Book a call Open the live demo →

Open-source Cozystack (CNCF project, created by Ænix) → Ænix Public Cloud, Private Cloud and AI Platform → Ænix builds, operates and migrates them.

Ænix builds and operates DORA-aligned, sovereign cloud platforms for financial-services organizations — banks, insurers, investment firms, and payment institutions — across the EU, DACH, and Central Asia. The foundation is Cozystack, an Apache 2.0 open-source platform (CNCF Sandbox project) that unifies virtual machines and containers on one Kubernetes API using KubeVirt, Cilium eBPF networking, LINSTOR/DRBD storage, and Tenant-CRD multi-tenancy. It runs on customer hardware, with opt-in volume encryption and audit logs the customer can ship to its own store, so data residency is a property of the architecture. Ænix sells Ænix Private Cloud Platform (quoted per RFP) plus engineering services, and typically engages through a fixed-price 14- or 28-day Platform Readiness Assessment covering DORA ICT third-party risk (Articles 28–30), exit feasibility, FinOps, and sovereign-AI architecture for sensitive financial data.

Quick facts

What it is A sovereign cloud platform built to support DORA for banks, insurers, investment firms, and payment institutions, built on Cozystack and run on customer-controlled infrastructure.
Licence Apache 2.0 (no per-CPU / per-core licensing)
Status Cozystack is a CNCF project (Sandbox since 2025-02-28; Incubating application in due diligence)
Who it's for Financial-services organizations facing DORA enforcement, ICT third-party concentration scrutiny, VMware/Broadcom exit, and sovereign-AI requirements.
Key capability VMs and containers on one Kubernetes API (KubeVirt), Cilium eBPF networking, LINSTOR/DRBD storage, Tenant-CRD multi-tenant isolation, opt-in volume encryption, audit logs with configurable retention.
Engagement Fixed-price Platform Readiness Assessment, 14 or 28 days (DORA/sovereignty, cost, platform engineering, AI workstreams), then a 3–12 month build depending on scope.
Regulatory scope DORA (applies since 17 January 2025), NIS2, GDPR; EU member-state and Kazakhstan procurement channels. AENIX s.r.o. holds ISO/IEC 27001:2022 for its own ISMS.

Banks, insurers, investment firms, and payment institutions face the steepest combination of pressures in 2026: DORA enforcement (in force January 2025), sectoral regulator scrutiny on ICT third-party concentration, AI workload economics, and the post-Broadcom VMware exit. The architectural answer is not “another hyperscaler region” — it’s a coherent platform where sovereignty, audit-readiness, and operational discipline are structural rather than bolted on.

Ænix builds and operates platforms for financial-services organizations across the EU, DACH, and Central Asia, on Cozystack. AENIX s.r.o. holds ISO/IEC 27001:2022 certification for its own ISMS. If you are the CISO, start with the CISO guide.

Pairs with: Ænix Private Cloud Platform for the regulated cloud foundation; AI Platform for claims AI / fraud detection / sovereign AI workloads. Free DORA Compliance Checklist →.

Book a call DORA compliance →

What financial services teams come to us for

The four most-common entry points:

DORA-aligned platform readiness — ICT third-party risk (Articles 28–30), exit-readiness, operational resilience testing. See DORA compliance.
Hyperscaler exit / repatriation — sustained workloads where public-cloud economics no longer fit. See Cloud repatriation.
Sovereign AI for sensitive data — GenAI / inference / analytics on customer or financial data that cannot leave the perimeter. See Sovereign AI.
VMware exit — VCF subscription pressure across the financial sector. See VMware alternative.

Most engagements combine two or more of these triggers.

Industry data points

LSEG Global Cloud Survey 2025: 82% of financial-services firms are in hybrid/multi-cloud. 84% adjusted cloud strategy due to regulatory developments.
Nutanix Financial Services ECI 2025: 92% rate their infrastructure as not ready for cloud-native or container workloads. 62% are hiring GenAI specialists.
Broadcom Private Cloud Outlook 2025: 53% prioritize private cloud for new workloads. 69% evaluating repatriation.

These are 2025 surveys, two of them published by infrastructure vendors; treat them as direction rather than independent measurement.

Still comparing? See pricing & platforms →

How Ænix engages with financial-services organizations

The standard engagement runs as a Platform Readiness Assessment with workstreams emphasized for the financial-services context:

Sovereignty + DORA workstream — ICT third-party risk (Articles 28–30), concentration analysis (Article 29), exit-feasibility, audit-readiness, encryption posture.
Cost workstream — TCO honest model, FinOps maturity, repatriation candidates aligned with commitment ladders.
Platform engineering workstream — multi-tenant Kubernetes-native foundation, golden paths for finance product teams, observability suitable for regulator dialog.
AI infrastructure workstream (where applicable) — sovereign AI architecture for data classes that cannot leave the perimeter.

Output is a written report aligned with regulator-readiness and a Phase 2 implementation roadmap.

Financial-services case studies

Financial-services customers are not named; two engagements are written up in anonymized form, with architecture and figures:

Private cloud in a bank — developer self-service on the bank’s own infrastructure.
Unified cloud portal for a financial group — one self-service portal across existing estates.

Reference calls can be arranged under NDA. All case studies →

Why Ænix specifically for financial services

Financial-services pressure

DORA enforcementICT third-party concentrationVMware / VCF exit

addressed by

Cozystack on customer hardware

VMs + containersOne Kubernetes APIApache 2.0

delivers

Structural sovereignty

Your hardwareExportable audit logsData residency

Regulator-aware engineering. Our team has direct experience with DORA / NIS2 / GDPR / sectoral regulatory dialog. We don’t deliver consulting that ignores the regulatory layer.
No hyperscaler bias. We’re not commercially aligned with AWS / Azure / GCP. Recommendations reflect substantive sovereignty, not partner economics.
Open-source platform foundation. Cozystack on customer hardware, opt-in volume encryption, audit logs you can ship to your own store. Details on the compliance evidence pages.
EU + Central Asia teams. Engineering teams in the EU and Central Asia; EU contracts through AENIX s.r.o. (Czech Republic). Support works through your GitOps repository and, with your approval, remote access to your clusters.

Ready to scope your build? Book a call →

Pricing

Ænix Private Cloud Platform is quoted per RFP after a fixed-price Platform Readiness Assessment (14 or 28 days) — see Platform Readiness Assessment for methodology. Financial-services engagements often use the 28-day variant for the broader scope.

Procurement: we accept RFI / RFP through standard procurement channels in EU member states and Kazakhstan.

How to start

Book a call

Or read more:

DORA compliance — financial-services regulatory trigger
Sovereign AI — AI on financial data
Cloud repatriation — hyperscaler exit
VMware alternative — VCF exit
Platform Readiness Assessment — engagement methodology
Cozystack — open-source foundation
CISO guide — what a security lead should check

Ænix created Cozystack (CNCF Sandbox project, CNCF Certified Kubernetes distribution, OpenSSF Best Practices) and co-maintains it with maintainers from other companies. On top of it we offer three platforms — Public Cloud, Private Cloud and AI. AENIX s.r.o. holds ISO/IEC 27001:2022.

Frequently asked questions

Does the platform help with DORA compliance?

It is built to support it; DORA obligations stay with the financial entity. Engagements address ICT third-party risk (DORA Articles 28–30, concentration risk at Article 29), exit feasibility, resilience testing (Articles 24–27), and audit readiness. The platform runs on your hardware, and audit logs can be shipped to your own immutable store. See the DORA compliance solution page and the free DORA Compliance Checklist.

Is this a viable VMware / VCF replacement for a regulated bank?

Yes. Cozystack runs both virtual machines (via KubeVirt) and containers on a single Kubernetes API, on customer hardware, under Apache 2.0 with no per-core licensing. It targets the VCF subscription pressure many financial-sector firms face after the Broadcom acquisition.

Can we run AI on sensitive financial data without it leaving our perimeter?

Yes. The sovereign-AI workstream architects GenAI, inference, and analytics on customer or financial data that cannot leave the perimeter — for example fraud detection or claims processing on private LLM infrastructure running on customer-controlled hardware.

How does an engagement start?

Most start with a Platform Readiness Assessment combining sovereignty/DORA, cost, platform-engineering, and (where applicable) AI-infrastructure workstreams. The output is a written, regulator-readiness-aligned report plus a Phase 2 implementation roadmap. Financial-services engagements often use the broader 28-day variant.

What is the licensing and lock-in model?

The platform foundation, Cozystack, is Apache 2.0 open source with no per-CPU or per-core licensing. It runs on customer hardware, so sovereignty and exit-readiness are properties of the architecture. Ænix sells a subscription (Ænix Private Cloud Platform, quoted per RFP) and engineering services on top — not a licence.

Which regions and regulatory frameworks does Ænix cover?

Ænix operates teams in the EU and Central Asia and engages with financial-services organizations across the EU, DACH, and Central Asia, aligned with DORA, NIS2, GDPR, and Kazakhstan frameworks. RFI/RFP is accepted through standard procurement channels in EU member states and Kazakhstan.