Cloud platform for manufacturing — Industry 4.0, edge-ready, sovereign

Open-source Cozystack (CNCF project, created by Ænix) → Ænix Public Cloud, Private Cloud and AI Platform → Ænix builds, operates and migrates them.

A cloud platform for manufacturing is a unified compute foundation that runs Industry 4.0 and IT/OT workloads consistently across HQ, regional sites, and production-floor edge under one operational model. It serves manufacturers in the EU, DACH, and Central Asia that fall under NIS2 (manufacturing of critical products is listed in Annex II), protect industrial IP such as design data and formulations, and run AI for quality control and predictive maintenance. Ænix builds these platforms on Cozystack, an open-source CNCF Sandbox project (Apache 2.0) that Ænix created and co-maintains, that runs virtual machines and containers on one Kubernetes API via KubeVirt, with Cilium eBPF networking, LINSTOR/DRBD storage, and Tenant-based multi-tenancy. Ænix also offers Ænix Private Cloud Platform (quoted per RFP), plus implementation and support services.

Quick facts

  • What it is A unified Cozystack-based cloud platform spanning manufacturing HQ, regional sites, and production-floor edge under one operational model
  • Licence Apache 2.0 (no per-CPU / per-core licensing)
  • Status Cozystack is a CNCF project (Sandbox since 2025-02-28; Incubating application in due diligence)
  • Who it is for Manufacturers across the EU, DACH, and Central Asia with IT/OT convergence, edge, and industrial-IP requirements
  • Regulation in scope NIS2 — manufacturing of critical products is listed in Annex II (important entities)
  • Key capabilities Air-gapped deployment for sensitive OT workloads, multi-site edge architecture, multi-tenancy for cross-BU and joint-venture separation, AI infrastructure for quality control and predictive maintenance
  • Recommended platform Ænix Private Cloud Platform for multi-DC and edge industrial IT/OT

Manufacturing in 2026 means simultaneous demands: Industry 4.0 transformation, NIS2 compliance (manufacturing of critical products is in scope), edge compute at production sites, AI-driven quality control, and increasing sovereign-cloud requirements for industrial IP. The architectural answer is a coherent platform that runs at HQ, regional sites, and production-floor edge — under one operational model.

Ænix builds platforms for manufacturing organizations across the EU, DACH, and Central Asia.

Pairs with: Ænix Private Cloud Platform — multi-DC + edge architecture for industrial IT/OT, built to support NIS2 for critical-product manufacturing, air-gap support for OT networks.


What manufacturing teams come to us for

  • Edge cloud at production sites — Industry 4.0 workloads close to machinery
  • NIS2 readiness — manufacturing of critical products is in scope
  • Sovereign cloud for industrial IP — design data, formulations, supply-chain data
  • AI workloads — quality control, predictive maintenance, supply-chain optimization
  • Hybrid: cloud for analytics, edge for operations

Why manufacturing architecture is different

  • Edge compute is core, not optional — production-floor latency requirements
  • Long depreciation cycles — manufacturing equipment lasts decades; platform must work with multiple hardware generations
  • OT/IT convergence — operations technology meeting information technology
  • Long retention — quality, traceability, regulatory data with multi-decade requirements
  • Industrial IP protection — design data and formulations have higher confidentiality than typical enterprise data

Cozystack pattern for manufacturing

IT/OT workloads
KubeVirt VMsContainersAI quality controlPredictive maintenance
run on
Cozystack
One Kubernetes APITenant multi-tenancyAir-gapped deployment
deployed across
Manufacturing sites
HQRegional sitesProduction-floor edge
  • Multi-site operations: HQ + regional + production-floor edge under one platform
  • Air-gapped deployment for the most sensitive workloads (industrial IP)
  • Multi-tenant for cross-BU and joint-venture separation
  • AI infrastructure for quality control and predictive maintenance

Where the platform sits in the Purdue model

The platform lives at Levels 3 and 3.5 — site operations and the DMZ — and does not reach down into Levels 0 to 2. Controllers, PLCs, SCADA and the safety systems stay exactly where they are, on their own network, under their own change control. What runs on the platform is the layer above: MES and historians, OPC-UA collectors and unified-namespace brokers, quality-inspection inference, the data pipeline out to the corporate level, and the VM-packaged industrial applications the vendor supports on one specific OS.

The IEC 62443 framing follows from that placement: the platform is one or more zones with defined conduits into the OT network, so segmentation is a design property rather than a firewall exception list. Cilium network policy defines the conduits, Tenant CRD boundaries separate a line, a site or a joint-venture partner, and the whole thing runs air-gapped where the site security concept requires it. Component-level certification for the industrial devices remains the device vendors’ obligation — that is not something an infrastructure platform can grant.

What the floor does when the uplink dies. This is the question that decides the architecture, so the answer should be plain: a site cluster keeps running. Control never depended on the platform in the first place, because it lives below it. The site’s own workloads — the historian, the local inference for inspection, MES functions running on site — keep serving from local storage, with their state replicated inside the site rather than to headquarters. What stops is what should stop: replication upward, central dashboards refreshing, cross-site aggregation. When the link returns, buffered data drains and the site resynchronizes. Production does not wait on a WAN circuit or on a control plane in another country, which is also why a hyperscaler edge service is a poor fit for a factory.


Companies running platforms built with Ænix

Hosting providers running Ænix Public Cloud Platform in production

Hosting providers running Ænix Public Cloud Platform in production. No manufacturing customer is named. The closest written-up deployment with the same structural pattern — multi-site, tenant-isolated, operated by the customer — is the sovereign public cloud case study.



Ænix created Cozystack (CNCF Sandbox project) and co-maintains it with maintainers from other companies. On top of it we offer three platforms — Public Cloud, Private Cloud and AI.

Frequently asked questions

Does a cloud platform for manufacturing help with NIS2 compliance?

It is built to support it; the obligations stay with you. NIS2 brings manufacturing of critical products into scope (Annex II). A Cozystack-based platform supports architectural controls behind the Article 21 risk-management measures — data sovereignty, multi-tenant isolation, and air-gapped deployment for the most sensitive OT workloads — across HQ, regional, and edge sites under one operational model.

Can it run at the production-floor edge, not just in a central data center?

Yes. Edge compute is treated as core, not optional. The same platform runs at HQ, regional sites, and the production floor, so Industry 4.0 workloads stay close to machinery for latency while sharing one operational model across all locations.

How is industrial IP such as design data and formulations protected?

The platform supports air-gapped deployment for the most sensitive workloads and Tenant-based multi-tenancy for separating business units and joint ventures. Combined with data-sovereignty controls, this keeps industrial IP confidential and within chosen jurisdictions.

Can manufacturers run AI workloads like quality control and predictive maintenance on it?

Yes. Cozystack provides GPU infrastructure (NVIDIA GPU Operator) for quality control, predictive maintenance, and supply-chain optimization, including running private LLMs on industrial data so sensitive inputs never leave the organization’s environment.

What does the platform cost and is there per-core licensing?

Cozystack is open source under Apache 2.0 with no per-CPU or per-core licensing. Ænix Private Cloud Platform for multi-site and edge deployments is quoted per RFP after a fixed-price 14- or 28-day Platform Readiness Assessment. Support tiers for self-run Cozystack start at $1,250 per 10 nodes per month (Basic, billed annually) — see the pricing page.

How does Cozystack run both VMs and containers for OT/IT convergence?

Cozystack uses KubeVirt to run virtual machines and containers side by side on a single Kubernetes API, with Cilium eBPF networking and LINSTOR/DRBD storage. This lets legacy OT virtual machines and modern containerized IT workloads share one platform.

Ready to talk?

Book a 30-minute discovery call — no commitment. We confirm fit, the right platform, and the next steps.