Own your future, not just your data.
Most organisations could not leave their cloud if they had to. EnigmaSure proves that you can. Your code, pipelines, infrastructure and data sit in an EU vault with the keys in your hands. Every month a restore drill runs on a second European cloud, and you get a signed, dated record your auditor can use.
An exit plan nobody rehearsed is not an exit.
Ask an IT director whether they could move to another cloud provider, and the answer is usually yes. Ask when they last tried, and it goes quiet. There is a plan in a drawer, a backup nobody has restored, and an assumption that the people who built the platform will still be around when it matters.
That used to be a risk you could carry quietly. Now it is becoming one you have to explain, for three different reasons, to three different audiences.
It starts with a report.
The report is what your auditor asks for, so that is where we start. Everything behind it exists to make that report true.
- 01Reports On demand, mapped to DORA and the Data Act, ready for your auditor.
- 02Escrow Code, pipelines, infrastructure and data in an EU vault. The keys are in your hands.
- 03Assurance An automated restore drill on a second European cloud. Every month.
- 04Proof A signed, dated record that the exit was rehearsed and worked.
- 05Resilience A warm standby, and the migration itself when you need to move.
Why monthly, and why a second cloud.
An exit you rehearse once a year tells you the exit worked once a year ago. In the meantime the code changed, the pipeline changed and someone renamed a secret. A drill that runs every month catches that drift while it is still a ticket, not an incident.
The restore also has to land somewhere else. Restoring into the same provider proves you have a backup. Restoring onto a second European cloud proves you can leave.
- PASSescrow deposit verified
- PASSinfra rebuilt · 2nd EU cloud
- PASSdata restored · integrity checked
- PASSapplication up · smoke tests
- SIGNEDreport · DORA / Data Act
Others assess, or escrow. We do the whole thing.
There are good tools that score your lock-in, and good services that hold your source code. Neither rebuilds your system somewhere else, and neither moves you when the day comes.
| Capability | Lock-in assessment | Software escrow | EnigmaSure |
|---|---|---|---|
| Assess lock-in, score exit risk | ✓ | — | ✓ on demand |
| Escrow of code, pipelines, infrastructure and data | — | Mostly code | ✓ |
| Restore drill on a European cloud | — | Yearly, in their own vault | ✓ monthly |
| Signed proof and audit reports | — | Yearly certificate | ✓ on demand |
| Standby and migration by our own engineers | — | — | ✓ |
Why a software company does this.
Because an exit is an engineering problem before it is a legal one. Someone has to rebuild the infrastructure, run the pipeline, restore the data and get the application answering again, on a platform it was not built for. That is the work we have done for twenty years, on systems that had to keep running.
It also builds on habits we already have. Development, test, acceptance and production have been strictly separated here for years. Developers work on anonymised data, and only the people who need production can reach it. EnigmaSure runs under the same rules, inside an ISO 27001 company with engineers in Rotterdam, Belgrade and Novi Sad.
Restoring into the same provider proves you have a backup. Restoring onto another cloud proves you can leave.
Built for- FinanceBanks, insurers, payment and investment firms under DORA
- PublicGovernment, municipalities and public institutions
- Care & educationHospitals, universities and colleges
Our own product runs under it.
We did the same with AI, which went into our own product before we built it for anyone else. EnigmaSure runs on an Enigmatry product: in escrow, drilled on a second European cloud, with its signed reports. What we offer you, we use ourselves.
The whole chain, not one link.
Assessment tools score lock-in, and escrow services hold code. EnigmaSure assesses your lock-in and holds your code, pipelines, infrastructure and data in escrow. It rebuilds them on another European cloud, proves that it worked and moves you when needed. The work is done by the same engineers who build and run mission-critical systems. What that says about how we work is on theabout page.
Could you leave tomorrow?
Start where your auditor starts: with a report on your exit risk. If the answer is uncomfortable, you will hear it from us before you hear it from them. The security page has the foundation EnigmaSure is built on; the article has the whole argument.
EU vault · second European cloud · engineers in Rotterdam, Belgrade and Novi Sad