ACN Qualified Cloud Infrastructure for Public Administration
Hosts public data and services on cloud environments compliant with national directives, ensuring maximum protection of the State's information assets.
Drive the public sector's digital transition from the ground up
Meeting the digital transformation goals of the Public Administration requires infrastructures that combine the certainty of the Italian regulatory framework with technological flexibility. CloudFire enables the Cloud-First strategy by simplifying migration processes for Local and Central Authorities and technological partners of the Public Administration with OpenStack as a Service.
Data Location Assurance and Data Sovereignty
Protecting institutional information excludes any compromise on data residency.Digital Sovereignty is the de facto standard for knowing who controls IT assets and who has access to them. CloudFire guarantees complete data permanence within national borders across its Italian regions.
Explore the impact of digital sovereignty →
Native compliance and ACN requirements fulfillment
The cybersecurity criteria established by the National Cybersecurity Agency (ACN) define the quality of an entity's governance. Choosing an ACN-qualified provider is not just a bureaucratic formality, but a strategic positioning that guarantees citizens expertise, transparency, and experience in managing their data.
View all our qualifications and certifications →
Autonomy and Continuity Throughout Cloud Migration
The mandatory migration from on-premise data centers should not lead to operational paralysis. CloudFire eliminates the friction of cloud migration by providing an IaaS environment based on the open standard OpenStack. This eliminates vendor lock-in risk and to maintain the continuity of public services during the switch-off.
Business Continuity and Enterprise-Class Architecture
Multi-region Architecture
Maximum resilience for critical services, thanks to geographical distribution and native Disaster Recovery policies.
Standard OpenStack
Total interoperability between public administrations and workload portability, in compliance with open-source software guidelines for the public sector.
Multilevel Security
Logical Layer 2 isolation, data encryption at rest and in transit, and constant SOC/NOC monitoring.
Resources
To design a resilient cloud infrastructure, backup is not enough, it is necessary to build an architecture on several geographically distinct regions.
S3 Scalable Object Storage
Archivia i tuoi dati in uno spazio Ceph Based scalabile e sicuro, S3 compatibile e senza sorprese nei costi.
IaaS Managed
Integra la tua Infrastruttura con servizi di Security Operations Center (SOC) e Network Operations Center (NOC).
FAQ
Is CloudFire listed in the ACN catalog of qualified Cloud services? Which services are included?
Yes, CloudFire is an infrastructure service provider qualified by the National Cybersecurity Agency (ACN) and is listed in the official cloud marketplace for the Public Administration. Each physical infrastructure residing in an Italian region, along with OpenStack as a Service, VMware as a Service, and Veeam Cloud Platform, fully meets the security, compliance, and resilience requirements necessary to host ordinary and critical public data and services. This qualification is backed by international security certifications including ISO/IEC 27001, ISO/IEC 27017 (cloud security), and ISO/IEC 27018 (protection of personal data in the cloud).
How is data sovereignty guaranteed in compliance with GDPR?
Digital sovereignty and full GDPR compliance are guaranteed by the exclusive and permanent localization of data within the Italian territory and the application of Italian jurisdiction to the company. CloudFire's infrastructure is distributed solely across Data Centers located in Italy, which completely rules out the enforcement of extra-EU regulations (such as the US Cloud Act) that could allow foreign government access to citizens' data. Logical tenant isolation at the networking level (Layer 2) and advanced encryption protocols ensure that the public entity, as the data controller, retains total and exclusive control over its informational assets.
Do you support Cloud migration under the NRRP (PNRR) funding calls?
Yes. CloudFire actively supports Local and Central Public Authorities in executing migration projects linked to Measure 1.2 of the NRRP (\"Migration to the Cloud\"). Since our infrastructure is built on the OpenStack open standard, authorities can deploy migration strategies with zero technological friction. CloudFire's engineering team works alongside PA technical staff and partner System Integrators to plan the transition path, properly configure compute flavors, and verify the security requirements needed for funding reporting and milestone completion.
Is it possible to configure Disaster Recovery solutions across different Italian Regions?
Yes. CloudFire provides a native Multi-Region architecture entirely within the national territory. This enables Public Administrations to deploy structured Business Continuity and Disaster Recovery (DRaaS) plans. IT teams can configure asynchronous data replication and geographic failover policies across distant infrastructures, ensuring very low recovery time objectives (RTO) and minimal recovery point objectives (RPO) in case of primary site unavailability, without incurring hidden costs or penalizing data egress fees.
