D / 04 Service line

Cloud, sovereign first.

Migrations, landing zones, and managed services across hyperscalers and in-kingdom sovereign clouds — with data residency, regulator alignment, and run cost designed in from day one.

Multi-cloudAWS · Azure · Oracle · STC
In-kingdomdata residency by design
24×7 managedSLA-backed
SCHEMATIC · LANDING ZONE
v1.0
IDENTITY · POLICY · SECRETS ENTRA · IAM · KEY VAULT NETWORK · ZERO-TRUST TRANSIT · FW · WAF · DDoS PROD workloads data apis live STAGE replica DEV build SOVEREIGN in-kingdom classified PDPL ✓ enclave OBSERVABILITY · COST · COMPLIANCE DATADOG · GRAFANA · CONFIG · TRAILS REGION · KSA-CENTRAL · RIYADH
» identity-first · zero-trust networking
» 4-account topology · sovereign isolation
» KSA region · PDPL-compliant by default
01 / Capabilities

What we deliver under Cloud.

Migration, modernization, and operations — billed against a baseline you sign off on.

CAP / 01

Sovereign landing zones

Reference architectures for AWS, Azure, Oracle, and STC Cloud — pre-aligned to NCA ECC, PDPL, and NDMO. Deployable in days, not quarters.

AWSAzureSTC Cloud
CAP / 02

S/4HANA migrations

SAP RISE and Brownfield migrations on hyperscaler or sovereign cloud. End-to-end ownership including Basis, security, and integration.

RISEBrownfieldBTP
CAP / 03

Application modernization

Lift-shift, replatform, refactor — chosen against a real business case. Container platforms (EKS / AKS / OpenShift) and event-driven re-architecture.

EKS / AKSOpenShiftEvent-driven
CAP / 04

FinOps & cost

Run cost designed at the architecture stage. Continuous savings through rightsizing, commitments, and architecture changes — reported monthly.

FinOpsRightsizingCommitments
CAP / 05

Platform engineering

Internal developer platforms — golden paths, IaC modules, CI/CD, and self-service environments — that accelerate every team without sacrificing controls.

IaC modulesCI/CDBackstage
CAP / 06

Managed cloud operations

24×7 ops for production estates. Patching, backup, DR, cost optimization, and incident response under measurable SLAs.

24×7 NOCDRSLA-backed
02 / Technology

The clouds we operate fluently.

Hyperscaler-native where it makes sense. Sovereign-native where the regulator demands it.

HYPERSCALER
AWS
HYPERSCALER
Azure
HYPERSCALER
Google Cloud
HYPERSCALER
Oracle Cloud
SOVEREIGN
STC Cloud
SOVEREIGN
SAUDI Cloud
ENTERPRISE
SAP S/4HANA
CONTAINERS
Kubernetes
CONTAINERS
OpenShift
IAC
Terraform
OBSERVABILITY
Datadog
FINOPS
Vantage / CUR
03 / Methodology

How we engage on Cloud.

PHASE / 01

Cloud diagnostic

Workload inventory, target-state architecture, regulatory map, and run-cost model. Output: a prioritized migration plan with TCO and a defensible business case.

3 weeksfixed scope
PHASE / 02

Landing zone build

Identity, network, accounts, guardrails, golden paths. The platform other teams will build on for years — done right the first time.

4–6 weeksmilestone-based
PHASE / 03

Migration waves

Workloads moved in dependency-aware waves. Each wave includes cutover, hypercare, and a retro before the next wave kicks off.

6–18 monthswave-based
PHASE / 04

Managed operations

24×7 NOC, FinOps, security operations, and quarterly architecture reviews. Reported monthly against SLAs and savings targets.

OngoingSLA retainer
04 / Compliance

Cloud, under regulation.

Regulatory posture is a first-class architectural concern, not a checklist at the end.

NCA ECC
SAMA CSF
PDPL
NDMO Classification
CST
ISO 27001
ISO 22301 (BCM)
SOC 2
05 / Sector application

Where cloud shows up first.

06 / FAQ

Common questions.

Hyperscaler or sovereign cloud — which?

Both, usually. Customer-facing, low-classification workloads run on hyperscaler regions inside KSA. Classified, regulated, or sensitive workloads run on sovereign — STC Cloud, SAUDI Cloud, or in-kingdom private. We design the split with you and the regulator.

How fast does a landing zone deploy?

4–6 weeks for a production-grade, regulator-aligned zone. Faster if it's a non-regulated workload; longer if it requires SAMA / NCA pre-approval.

What about run cost?

Designed in. Architecture decisions surface unit economics from day one. We also run continuous FinOps in managed services, with savings reported monthly.

Can you migrate SAP without disrupting the business?

Yes. We've delivered S/4HANA migrations under aggressive cutover windows. RISE and Brownfield both supported. Hypercare baked into every wave.

Do you do platform engineering?

Yes — golden paths, IaC modules, internal developer portals (Backstage), and self-service environments. The point is to make every other team's life easier.

What about disaster recovery?

RTO/RPO co-defined per workload. Cross-region or cross-cloud replication, tested DR playbooks, and quarterly DR drills under managed services.

Cloud, without the cargo cult.

سحابة بلا ضجيج.

Thirty-minute working session with our Cloud lead. Bring your highest-priority workload; we'll map a target state and a defensible business case.