Sovereign cloud platform for the public sector — from procurement to production

Open-source Cozystack (a CNCF project we create and maintain) → Ænix Platform, the supported commercial distribution → Aenix builds, operates and migrates it.

A sovereign cloud platform for the public sector is infrastructure that government, public administration, and quasi-public bodies own and control end to end, so regulated and classified data stays within the jurisdiction mandated by procurement and law. Aenix builds these platforms for EU member states and Central Asia on Cozystack, its open-source Apache 2.0 foundation that runs virtual machines and containers on one Kubernetes API. Engagements typically start with a Platform Readiness Assessment covering sovereignty, NIS2 and sectoral regulator gaps, procurement-process readiness, and capability transfer, then move to hardware-to-platform-to-operations implementation. Air-gapped deployments, customer-controlled encryption keys, and knowledge handover to in-house teams are first-class deliverables, and Aenix responds to RFI and RFP through standard government procurement channels.

Quick facts

What it is A customer-owned, audit-ready sovereign cloud platform for public-sector and quasi-public organizations, built on the open-source Cozystack foundation.
License Apache 2.0 (no per-CPU / per-core licensing)
Status Cozystack is a CNCF project (Sandbox since 2025-02-28; Incubating expected late summer 2026)
Who it is for Government IT agencies, public administration, and quasi-public infrastructure operators (transport, energy, water) across the EU and Central Asia, including NIS2 essential entities.
Standards and regulations NIS2 (essential-entity scope), data-localization and procurement-mandated sovereignty rules; Cozystack is a Kubernetes Certified Distribution following OpenSSF Best Practices.
Key capability Air-gapped deployments and customer-controlled encryption keys; KubeVirt VMs plus containers, Cilium (eBPF) networking, LINSTOR/DRBD storage, Tenant-CRD multi-tenancy.
Engagement model Platform Readiness Assessment first, then end-to-end hardware-to-platform-to-operations implementation with runbooks and capability transfer to in-house teams.

Public-sector and quasi-public organizations face a particular combination of constraints in 2026: procurement-mandated sovereignty (EU member states, Kazakhstan, several APAC jurisdictions), NIS2 compliance (essential entity scoping), data-localization rules, and increasing AI workload pressure on data classes that cannot leave the perimeter. The architectural answer is structurally sovereign, customer-controlled, and audit-ready — built on infrastructure the organization actually owns.

Ænix builds platforms for public-sector and quasi-public organizations across the EU and Central Asia. Open-source foundation (Cozystack), procurement-portal-ready, regulator-aligned.

Pairs with: Ænix Private Cloud Platform for sovereign cloud with strict customer-controlled keys + air-gap option; Public Cloud Platform for large public-sector cloud product launches at hyperscaler-adjacent scale.

Book a call Data sovereignty solutions →

What public-sector organizations come to us for

Sovereign-cloud platform builds — procurement-mandated sovereignty under EU member-state, KZ, or APAC frameworks. See Data sovereignty.
NIS2 compliance for essential entities — public administration is in scope. See NIS2 compliance.
Sovereign AI infrastructure — for departments handling sensitive citizen data with AI use cases. See Sovereign AI.
Data-localization platform — where data class must remain in jurisdiction at every layer.

Most engagements involve formal procurement processes; Ænix accepts RFI / RFP through standard channels in EU member states and Kazakhstan.

Why public sector is different

Procurement processes are formal — RFI / RFP / tender cycles run through specific portals (goszakup.gov.kz, mitwork.kz, zakup.sk.kz in Kazakhstan; eTendering and member-state portals in EU; equivalent processes elsewhere).
Sovereignty is non-negotiable — not “preferred” or “with caveats.” Either data lives where the procurement clause says, or the contract fails.
Audit-readiness drives architecture — supervisor inspection is a near-certain part of the operating model.
Capability transfer to in-house teams — many public-sector deployments require knowledge handover so the customer team operates independently after build.
Open-source preferred — proprietary lock-in often disqualifies in evaluation.

Still comparing? See pricing & platforms →

How Ænix engages with public-sector organizations

Platform Readiness Assessment

SovereigntyRegulator-gap (NIS2 / sectoral)Procurement-process readiness

leads to

Phase 2 implementation

Hardware-to-platform-to-operations

hands over to

In-house team operations

Knowledge transferRunbooks

The standard engagement: Platform Readiness Assessment with workstreams emphasized for public sector — sovereignty + regulator-gap (NIS2 / sectoral) + procurement-process readiness + capability transfer to in-house teams.

Phase 2 implementation runs end-to-end: hardware-to-platform-to-operations, with documented exit path (knowledge transfer + runbooks) so the customer team operates independently.

What runs on Cozystack in public sector

Public-sector references are anonymous by procurement convention rather than by NDA alone; these are live engagements:

A central-government IT services agency operating shared sovereign cloud for ministries on Cozystack.
A regional government with classified-data-residency requirements running air-gapped Cozystack deployment.
A quasi-public infrastructure operator (transport, energy, water) under NIS2 essential-entity classification.
A public-sector AI initiative for government-data analytics on private LLM infrastructure.

"Running Nuvolos on sovereign bare metal meant we needed hyperscaler-grade multi-tenancy without the hyperscaler. Cozystack delivered exactly that — isolated tenants, shared GPUs, KubeVirt for legacy workloads — and it's why we can promise our customers infrastructure control, not just a workspace."

Alexandru PopescuCEO, Nuvolos

"Cozystack is a powerful platform, but Ænix is what lets us squeeze every last bit of value out of it. Their team knows the product down to the source code, responds within minutes rather than days, and treats our roadmap as if it were their own. With Ænix behind us, we ship new managed services faster and sleep better — the platform just keeps running."

Evgeniy KozhukhovskiyCEO & Founder, Kubeone

"Working with Ænix feels less like buying support and more like gaining an engineering partner. They bring serious product and platform expertise to every conversation, flag risks before they become incidents, and help us turn Cozystack into real business results: shorter time-to-market, predictable operations, and infrastructure costs we can finally plan around."

SF Sergey FedenyakCEO & Founder, Gohost

Procurement readiness

We accept RFI / RFP through standard government procurement channels including:

Kazakhstan — goszakup.gov.kz, mitwork.kz, zakup.sk.kz, Unified Procurement Platform
EU member states — TED (Tenders Electronic Daily), national e-procurement portals
Other jurisdictions — discussed during discovery call

We respond with: company profile, prior public-sector references (where permissions allow), technical compliance with sovereignty / NIS2 / sectoral requirements, and pricing.

Ready to scope your build? Book a call →

Why Ænix specifically for public sector

Open-source platform — Cozystack is Apache 2.0, CNCF Project. No proprietary lock-in. Source-available architecture for evaluation.
EU + Central Asia teams. Aligned with EU regulatory frameworks; experience with KZ procurement processes.
Capability transfer first-class — knowledge handover is a primary deliverable, not optional.
Cozystack supports air-gapped deployments for the most-sensitive workloads.

How to start

Book a call

Or read more:

Data sovereignty — sovereignty-led engagement
NIS2 compliance — essential-entity regulatory
Sovereign AI — AI on classified data
Platform Readiness Assessment — engagement methodology
Cozystack — open-source foundation

Ænix is the team behind Cozystack (CNCF Project), and we offer Ænix Platform — our commercial productized offering based on Cozystack, Kubernetes Certified Distribution, OpenSSF Best Practices.

Frequently asked questions

Does Aenix respond to public-sector RFI and RFP through official procurement portals?

Yes. Aenix accepts RFI and RFP through standard government channels, including goszakup.gov.kz, mitwork.kz, zakup.sk.kz and the Unified Procurement Platform in Kazakhstan, and TED plus national e-procurement portals in EU member states. Responses cover company profile, references where permissions allow, technical compliance, and pricing.

Can the platform run fully air-gapped for classified or sensitive data?

Yes. Cozystack supports air-gapped deployments for the most sensitive workloads, and the Ænix Private Cloud Platform adds strict customer-controlled encryption keys, so data classes that cannot leave the perimeter remain in jurisdiction at every layer.

How does this help with NIS2 compliance?

Public administration and quasi-public infrastructure operators in transport, energy, and water are commonly in scope as NIS2 essential entities. Aenix engagements include a regulator-gap workstream against NIS2 and sectoral requirements, and the platform is designed to be audit-ready for supervisor inspection.

Is there proprietary lock-in?

No. The foundation is Cozystack, an Apache 2.0 CNCF project with no per-CPU or per-core licensing. The architecture is source-available for evaluation, which avoids the proprietary lock-in that often disqualifies vendors in public-sector tenders.

Can our in-house team operate the platform after the build?

Yes. Capability transfer is a primary deliverable. Phase 2 implementation runs hardware-to-platform-to-operations with a documented exit path, including knowledge handover and runbooks, so the customer team operates the platform independently.

What does Aenix sell on top of the open-source project?

Aenix sells the Ænix Platform, a productized commercial offering based on Cozystack, plus services such as the Platform Readiness Assessment and implementation. Platform pricing tiers are Basic at $1,250/mo (10 nodes), Standard at $3,000, Plus at $5,500, and Enterprise Custom.