Managed Public Cloud Azure, GCP and Microsoft 365, professionally operated.
We plan, migrate and operate your workloads on Microsoft Azure and Google Cloud Platform, including Microsoft 365 as a modern digital workplace. You get the scale of the major hyperscalers, we take care of maintenance, security, updates and cost control.
Public cloud is powerful, but it doesn't run itself.
With the right partner it becomes a reliable tool.
Public cloud as a managed service, six building blocks.
Advisory & architecture
We assess which workloads belong in the public cloud and which don't, then design the right architecture on Azure or GCP.
Migration & build
Clean lift-and-shift or re-architecture, documented and tested. Tenant setup, landing zones, network and identity.
Day-to-day operations
Monitoring, updates, backup, incident handling and user support, with escalation to an engineer you know by name.
Cloud security
Hardening to CIS benchmarks, Entra ID protection, Microsoft Defender or Google Security Command Center, MFA and Conditional Access.
Cost controlling
Monthly cost reporting, reservations and rightsizing, so the cloud invoice never becomes a quarter-end shock.
Digital workplace
Microsoft 365 with Teams, OneDrive and SharePoint, cleanly set up, securely configured and supported in daily use.
What we concretely do on Azure, GCP and Microsoft 365.
| Compute | Azure VMs · Azure Virtual Desktop · App Service |
| Storage & DB | Azure Files · Blob Storage · SQL Database · Cosmos DB |
| Identity | Entra ID (formerly Azure AD) · Conditional Access · MFA |
| Security | Microsoft Defender · Sentinel · Key Vault |
| Network | VNet · ExpressRoute · Application Gateway · Front Door |
| Backup & recovery | Azure Backup · Site Recovery (ASR) |
| Hybrid | Azure Arc · S2S VPN into our Swiss datacenters |
| Compute | Compute Engine · Cloud Run · GKE (Kubernetes) |
| Storage & DB | Cloud Storage · Cloud SQL · BigQuery |
| Identity | Cloud Identity · IAM · Workload Identity Federation |
| Security | Security Command Center · Cloud Armor · Secret Manager |
| Network | VPC · Cloud Load Balancing · Cloud Interconnect |
| Data & AI | BigQuery · Vertex AI · Dataflow |
| Workspace | Google Workspace (Mail, Drive, Meet) on request |
| Licensing | Business Basic / Standard / Premium · E3 / E5 |
| Apps | Word · Excel · PowerPoint · Outlook · OneNote (Apple, Win, Web) |
| Collaboration | Teams · OneDrive · SharePoint · Loop · Planner |
| Telephony | Teams Phone System · Direct Routing · Calling Plans |
| Identity & security | Entra ID · MFA · Defender for Office 365 · Intune |
| Backup | third-party backup of M365 data (Veeam / AvePoint) |
| Migration | from Exchange on-prem, Google Workspace, Notes, IMAP |
The modern workplace, with or without a classic PBX.
Microsoft 365 (formerly Office 365) is the foundation of daily work for most of our customers. We set up the licences cleanly, integrate them with your identity and devices (Apple, Windows, Linux), and run the day-to-day, including security and backup.
- Scalable solution at a fixed monthly price per user.
- Device-independent access across all your platforms.
- Teams as conferencing, chat and collaboration platform, included.
- Concurrent document editing with automatic version history.
- Office licences included, always on the latest version.
- Classic PBX replaceable with Teams Phone, including Swiss numbers.
- M365 data additionally backed up off-platform (third-party backup).
Four pillars, from first idea to monthly invoice.
Planning
Requirements analysis, workload assessment (which cloud, what stays on-prem) and an architecture design for Azure and/or GCP.
Implementation
Tenant setup, landing zone, workload migration, integration with your identity and network, all cleanly documented.
Operations
Monitoring, updates, patching, backup, security and user support, with defined response times and a fixed contact person.
Controlling
Monthly reporting on cost, consumption and optimisation potential. Reservations, rightsizing, licence optimisation.
What's often needed around Azure, GCP and M365.
E-mail security
Anti-phishing and anti-spam in front of Microsoft 365, plus tamper-proof archiving of your mail data.
Endpoint protection
Protection for the devices accessing Azure and M365, with Defender, Intune or Jamf.
Security consulting
Hardening, MFA strategy, Conditional Access and zero-trust designs for your cloud environment.
Private Cloud
Workloads that don't belong on a hyperscaler we run in our own Swiss datacenters.
Firewall & VPN
Secure connectivity from your sites and home offices into Azure and GCP via IPsec, WireGuard or ExpressRoute.
IT outsourcing
When public cloud is only one piece: we take over operations for your entire IT environment.
When is the public cloud the right choice?
Public cloud means using compute, storage and SaaS services from the major hyperscalers, in our focus Microsoft Azure and Google Cloud Platform (GCP). For many SMBs not the entire IT, but parts of it, are best placed there: Microsoft 365 for collaboration, Azure for identity and SaaS-adjacent services, GCP for data analytics or specific PaaS building blocks.
We help you make the right call, build the platform cleanly and run it day to day. Instead of having to deal with Entra ID, Defender, Cost Management, Conditional Access or GCP IAM yourself, we take it on. You get a fixed contact, a monthly report and a setup that follows Microsoft\'s and Google\'s recommendations as well as the common security benchmarks (CIS).
Typical work we deliver in public cloud projects: Microsoft 365 rollout or optimisation including Teams Phone, building a clean Azure landing zone, migrating existing workloads from on-premises into Azure or GCP, protecting identities with MFA and Conditional Access, third-party backup of M365 data, and ongoing cost optimisation.
Often asked before the first call.
We focus on Microsoft Azure and Google Cloud Platform (GCP) as well as Microsoft 365. Other hyperscalers come up only on a project basis, on request.
Both is possible. We deliver Microsoft 365 licences as a CSP partner bundled with the operations, or you keep your existing licence agreement and we run the tenant.
The cost is made up of the hyperscaler's consumption fees (variable, depending on usage) and our managed-service share. The latter we bill either as a monthly flat rate or by actual effort, depending on your preference.
Apple, Windows and Linux equally. We set up Microsoft 365 and Azure access so they work smoothly on Mac, PC, iPad and smartphone, with centrally managed security.
Microsoft operates Swiss datacenters (Zurich, Geneva) for M365 and Azure. We set up the tenant on the Swiss data location by default. Google Cloud operates a region in Zurich which we prefer for GCP workloads.
Yes. With Teams Phone System you can keep Swiss landline numbers, including porting. We deliver this end-to-end: licences, SIP trunk or Direct Routing, devices and configuration.
We are broadly skilled and advise neutrally. Some workloads (identity, M365, global applications) belong in the public cloud, others (classic file servers, line-of-business apps, latency-sensitive services) belong in a private cloud. We implement what fits your situation.
Ready for a non-binding cloud check?
We assess with you whether Azure, GCP or Microsoft 365 make sense in your situation, and what a meaningful next step looks like. One hour, no sales pressure.