NIS 2 directive

The problem:

Sovereign cloud solutions increase operational burden

In July 2025, Microsoft told the French Senate they cannot guarantee data sovereignty for EU customers. Under oath, their director of public and legal affairs admitted that if the US administration demands access to data on Microsoft servers, they must comply.

NIS 2 now requires you to document this exposure for every cloud vendor in your supply chain.

The obvious answer is to move to EU sovereign infrastructure. But there's a problem: sovereign clouds don't offer the managed services you're used to.

Hetzner, OVHcloud, and Scaleway give you VMs and maybe bare Kubernetes. They don't give you managed Kafka. They don't give you time-series databases with automatic retention policies. They don't give you container orchestration that just works.

So you're stuck with two bad options:

Stay on US hyperscalers and deal with the documentation burden
Move to sovereign infrastructure and build everything yourself

Quix is the third option. We provide the platform layer that makes sovereign infrastructure work for industrial data teams.

Quix eases the burden with managed services

Quix deploys on-premise or in your own VPC. Your test data never leaves your network. Once deployed, Quix operates without any connection to the outside world, which is why teams in defense, aerospace, and automotive trust it for sensitive programs.

Data orchestration

Quix includes managed Kafka so message brokers, topic management, consumer groups, partitioning are all taken care of. You write Python applications that process data and we handle the infrastructure underneath.

Data storage

The Quix Lakehouse and configuration store enable you to store vast volumes of raw data and related metadata while still giving you sub-second query speeds. Your engineers can focus on analysis rather than database administration.

Container orchestration

Our managed Kubernetes layer allows you to run processing jobs run in containers that scale horizontally. We manage cluster operations and scaling so you don't need an entire IT team to maintain it.

The integration layer

The Quix platform features external source and sink connectors, data APIs, and a tight Git integration with in-built CI/CD that lets your team ship data pipelines without any bespoke integration work.

Simplify your compliance position

Moving to Quix on sovereign infrastructure addresses multiple NIS 2 requirements at once:

Requirement	How Quix helps
CLOUD Act exposure assessment	You can run Quix on EU infrastructure (Hetzner, OVHcloud, or your own servers) with no US jurisdiction
Supply chain documentation	Consolidates your data infrastructure into a single vendor relationship instead of five separate assessments
Vendor lock-in assessment	Built on open-source: Kafka, Kubernetes, standard databases. You get the blueprint and can take it with you
Incident reporting	Single platform means a single point of contact for security incidents

Runs where you need it

On sovereign cloud: Deploy on Hetzner, OVHcloud, Scaleway, or any EU provider. We manage the platform layer; they provide the infrastructure.

On-premise: Deploy in your own data center. Your test data never leaves your network. Air-gapped deployment available for sensitive programs.

Already on AWS or Azure? You don't need to migrate existing production systems. But every new R&D data pipeline you build on US infrastructure adds to your compliance burden. Quix gives you a clean starting point for new infrastructure without touching what's already running.

The middle ground between DIY and hyperscalers

Sovereign cloud alone	Quix on sovereign cloud	US hyperscalers
Raw VMs	Managed Kafka, K8s, data storage, analysis	Wide range of Fully managed services
No CLOUD Act exposure	No CLOUD Act exposure	CLOUD Act exposure
You build everything	You build your logic, we handle infrastructure	You build your logic, they handle infrastructure
Requires platform team	Works with existing team	Works with existing team but requires specialization
Full control, high effort	Full control, lower effort	Limited control, moderate effort

Trusted by data-intensive R&D teams at:

NIS 2 timeline in Germany: Where we are now

December 2025	Germany's NIS 2 implementation law takes effect. Security requirements are legally binding with no transitional period.
January 2026	BSI registration portal opens. Companies can begin formal registration.
March 2026	Registration deadline. Once registered, you're on the BSI's radar for audits and enforcement.
2026 onwards	BSI can conduct audits, issue binding orders, and levy fines up to €10M or 2% of global revenue.

Let's talk

Discuss your infrastructure situation

Schedule a 30-minute call with our team. We'll discuss your current data infrastructure, your deployment requirements, and whether Quix is a good fit for your data needs.