We take responsibility for monitoring, patch management, backup and incident readiness for Linux, Windows and container environments. Scope, response and action targets, and RPO/RTO are set in the SLA – with a named contact and Swedish-language support.
With self-managed hosting you get a server – the rest is your problem: patching, backup, monitoring, incidents at 3 a.m. With managed operations we own the entire problem, with an SLA and a named contact. You focus on your applications.
Operations of Linux and Windows servers as well as container environments (Docker/Kubernetes) in our Swedish data center – or hybrid against your own equipment.
Scheduled security patching with change windows, verified backups with defined retention and regular restore tests.
Proactive monitoring of availability, capacity and security events – with an alert chain and response around the clock.
Four areas we handle for you, every month, documented.
Recurring model with no surprises. No investments in your own hardware, no emergency consulting hours when something goes wrong.
We own the problem end to end – hardware, virtualization, OS and operations. You focus on your business and your applications.
Support in Swedish, from engineers who know your environment. No ticket roulette to anonymous call centers in other time zones.
Documentation and routines that support your compliance work – included in the delivery.
Example pricing based on system complexity. All tiers include supporting material for NIS2 incident reporting and a data residency certificate.
Small system, < 1 TB
Medium, 1 – 10 TB
Enterprise, > 10 TB or multi-region
Prices are indicative, excl. VAT – exact quote after a review of your environment.
You should always know what to expect – and who to call.
| Availability | 99.5% uptime per agreement, higher levels by agreement |
|---|---|
| Time to acknowledgement | Within 1 hour on a critical incident, around the clock |
| Time to start of remediation | Within 4 hours on a critical incident, around the clock |
| Recovery targets (RTO/RPO) | RTO < 1h as the target after diagnosis, RPO < 24h – exact levels are set in the SLA |
| Named contact | Dedicated technical contact person who knows your environment – no anonymous queue |
| Reporting | Monthly compliance report with availability, incidents, patch status and capacity trend |
In-house operations look cheap until you factor in staff, tooling and the risk of what doesn't get done.
| In-house operations (DIY) | Managed EU Drift | |
|---|---|---|
| Cost over 5 years (typical environment, 10–20 VMs) |
SEK 3–5 million – at least one full-time engineer (~SEK 1 million/year incl. overheads) + tooling, backup infrastructure and continued training | SEK 0.7–1.4 million – fixed monthly cost (SEK 12,000/mo = SEK 720,000 over 5 years for Tier 2) |
| Patching | Done "when there's time" – in practice, critical patches are missed during vacations and peak load | Critical patches within 24h, contracted and documented – every month, year round |
| Nighttime incidents | Your engineer gets woken up – or nobody does and your customers notice first | 24/7 on-call with alert chain included, within 4h to start of remediation for critical incidents |
| Backup verification | The backup "should work" – restores are rarely or never tested | Restore test every 6 months, RTO < 1h documented |
| Compliance documentation | Scraped together manually before every audit – days of work | Monthly compliance report generated continuously – ready when the auditor asks |
| Key-person dependency | All knowledge with one person – who can resign | Team with documented procedures + named contact |
Illustrative scenario based on an anonymized customer – actual outcome varies with environment and agreement.
Our customers have one thing in common: operations are business-critical but not their core business.
You sell software, not operations. Your customers impose compliance requirements (NIS2, DORA, data residency) that you must be able to prove – without building your own operations team.
1–3 people handle everything from support to servers. We take the servers, you take the business – and your key person can actually go on vacation.
Healthcare, energy, public sector and their suppliers. Technical input for NIS2 incident reporting, documented patching and auditable logs are included in the base delivery. Responsibility for the regulatory reporting itself stays with you.
From contract to full operations in 2–3 weeks – with no interruption to your business.
We inventory your systems, document architecture, dependencies and sensitive components. You appoint a contact person – we appoint your named engineer.
Monitoring agents are installed, the alert chain is configured and backup jobs are scheduled. The first full backup is verified with a test restore.
Systems are hardened per CIS benchmark, patch levels are inventoried and outstanding security updates are handled in planned change windows.
Responsibility is formally handed over. The first monthly report is delivered after 30 days – then operations run on.
Operations are only as good as the security work behind them.
We work according to principles from ISO 27001 (without being certified): documented procedures, least-privilege access control and an annual review of the entire security program.
The infrastructure can be penetration tested by an external party per agreement. Critical findings are remediated within the agreed time and summarized in your compliance report.
Documented process: detect → isolate → remediate → report. Critical incidents are escalated directly to your contact person, with NIS2 reporting documentation within 24 hours.
No. Most customers run in our Swedish data center, but we also operate hybrid environments against your own equipment. Operating in our Swedish data center can give clearer control over processing location, access and supply chain. What effect that has in your compliance assessment depends on the whole service, the contractual chain and your own use.
Critical incident = production system down or suspected security breach. Then acknowledgement within 1 hour and action started within 4 hours apply around the clock, direct escalation to your named contact and technical input for your NIS2 incident reporting within 24 hours.
The standard agreement runs with a 3-month notice period. Your data is always yours – at termination we export systems and backups in standard formats and assist with the handover to your new operations partner.
Critical and actively exploited vulnerabilities are prioritized according to the agreed SLA. Targets for assessment, testing, patching or other risk-reducing action are set per platform and documented in the agreement – if needed with an emergency change window coordinated with your contact person. Other updates are handled monthly.
Onboarding is included in the monthly cost with a 12-month agreement – no setup fees for typical environments. If you have just migrated with us (EU Cloud Migration), your environment is already documented and onboarding takes days instead of weeks.
Yes. Managed database (PostgreSQL, MySQL, SQL Server) and container orchestration are included from Tier 2. We handle the infrastructure and platform – your applications and your code remain your responsibility.
We're already your migration partner – book an operations consultation and we'll review your environment and prepare a proposal with SLA and monthly cost.