Your systems.
Our infrastructure.
Swedish foundation.
Give your team support and your systems an isolated environment in Sweden. Choose a managed operations service with clear responsibilities and follow-up.
Swedish infrastructure.
Security from the start.
Build on an isolated Swedish environment for compute, storage and networking.
Hardening, traceability and review processes are built into the foundation. PCI DSS informs the architecture and working practices.
- Compute
- Storage
- Network
Conceptual diagram. Scope and responsibilities are defined for your solution.
- 01
Start with your systems
Get an isolated customer environment on Complior's infrastructure. We size capacity and networking for your applications, databases and dependencies.
- 02
Operations that take pressure off your team
Choose incident readiness, proactive management or a more extensive Compliance managed operations service. Responsibilities for systems and applications are documented together.
- 03
Backup with a recovery plan
Add separate backups in Sweden. Define retention periods, recovery objectives and how restoration will be tested.
Read about backup as a service →
How much responsibility
do you want to hand over?
Choose what your team wants to manage and what you want to hand over. Compliant Cloud is the platform; the managed operations service determines how we support you.
| Compare services | On Call | Premium | Compliance |
|---|---|---|---|
| Suitable when | You need readiness when something happens. | You want to ease the team's day-to-day operational workload. | You need security controls and evidence for assessment. |
| Complior's role | Maintains round-the-clock readiness and provides support during an incident. | Proactively manages and optimises the environment. | System management, security checks and quarterly reporting. |
| We agree together | The systems covered by on-call support, contact channels and escalation. | Which parts we manage and how the work is followed up. | The controls and evidence your review needs. |
On Complior's own infrastructure. Systems, responsibilities and service levels are defined in your agreed service scope.
Explore the three managed operations services
Readiness when something happens.
Extend your team with round-the-clock readiness for agreed systems. Contact channels and escalation paths are clear before an incident occurs.
What you get
- Readiness for the agreed environment.
- Clear routes to support and escalation.
- An operations team that works with your organisation.
Operations with evidence for assessment.
Daily systems management and security work with documented follow-up. You receive records to review the controls in your environment.
What you get
- Hardening, critical system updates and manual review of security logs.
- Internal and external vulnerability checks.
- Quarterly reporting and audit support.
Follow the security work.
Show what has been done.
The Compliance managed operations service provides ongoing controls beyond the platform's security baseline. Review your agreed environment and use the supporting records to prepare for an assessment.
See responsibilities and assessment evidence- 01
Manage and harden
Daily system management, security hardening and critical updates keep the agreed environment maintained.
- 02
Review and detect
Manual review of security logs every day. Internal and external vulnerability scans identify findings to prioritise and follow up.
- 03
Document and follow up
Reports and technical documentation provide insight into the controls and support audit preparation. Your organisation's own processes and decisions are also part of compliance.
Evidence every quarter.
You receive Compliance records through the ticketing system to follow up work and deviations. Here are four examples.
- 01 / SYSTEMSCritical updates completed
- 02 / VULNERABILITIESDeviations to follow up
- 03 / NETWORKDocumented network diagrams
- 04 / FIREWALLFirewall rule review
From your needs.
To a plan for operations.
We start with your systems, dependencies and requirements. Here is a proposed approach to solution design, implementation and follow-up, adapted to your environment.
Map your systems
Review systems, dependencies, data volumes and business requirements.
Choose a solution and responsibilities
Agree the platform, managed operations service, responsibilities and how results will be followed up.
Plan migration and testing
Plan migration, testing and rollback before moving to the new environment.
Follow up in everyday operations
Review service delivery and adapt the solution as systems and needs change.
A Swedish foundation.
Within a wider architecture too.
Compliant Cloud can be combined with selected services in Azure. Choose where workloads should run and which control points are needed.
See how the environments can work together
Compliant CloudSelected workloads and data on Complior's infrastructure in Sweden.
Explore the platformintegrations
Microsoft AzureConceptual diagram. Integration and scope are assessed for each solution. Complior's managed operations service applies to its own infrastructure. For identity and permissions: IDombud.
ClearingSecure infrastructure for an organisation with demanding payment security requirements.
A payment platform.
Many external connections.
Travel Clearing needed a hosting partner for its payment platform. Implementation required adaptation to several partners and systems. Complior supported the process throughout.
Read about Travel ClearingBefore the next step.
What can we put in Compliant Cloud?
We start with your applications, databases and business systems. Compatibility, capacity, network dependencies and requirements need to be reviewed before we propose an environment.
Do we need to move everything at once?
We review which systems belong together and which can be handled separately. Migration order, testing and any parallel operation are planned around your dependencies.
What is Complior responsible for?
Complior is responsible for the agreed service delivery and operations on its own infrastructure. Responsibilities for matters such as applications, permissions, maintenance and follow-up need to be set out in your agreement.
Can the service be combined with Azure or AWS?
A hybrid solution can span several environments. We first need to assess connections, data requirements and integration support. Compliant Cloud does not mean that Complior takes over operation of the customer's Azure or AWS environment.
How does the platform support our compliance work?
The platform provides a security foundation with hardening, traceability and documented processes. The Compliance managed operations service adds controls and quarterly documentation for the agreed environment. Review the current assessment scope, responsibility matrix and relevant certificates with us before making your decision.
How do we plan backup and recovery?
Decide which systems and data need protection, how long copies should be retained and which recovery objectives apply. Separate backup in Sweden and restore tests are designed around your environment. Read more about backup as a service.
What does
your environment need to handle?
Start with your most important systems and the work you want help with. Together, we review requirements, responsibilities and the managed operations service that suits you.
- Which systems matter most to you?
- What do you want to remain responsible for?
- Which requirements do you need to demonstrate that you meet?