When operating software critical to society, navigating data location and legal jurisdiction is a core architectural requirement. Understanding the distinction between data residency and data sovereignty is vital when designing modern, cloud-native architectures.
Cybersäkerhetslagen (CSL) makes cybersecurity a management responsibility. Learn what NIS2 compliance requires and why boards must treat security as a governance issue, not just IT.
Cybersäkerhetslagen: This is about management decisions, not firewalls Read More »
Cloud-native experts from Avassa and Elastisys explore why modern enterprises are rebalancing from cloud-first to hybrid and edge – driven by EU compliance, resilience, and the need for control.
In this customer case, we highlight how Personalkollen leverages Welkin to spend less time maintaining a platform and more time delivering value to their customers.
Personalkollen Relies on Welkin for Security, Compliance, and Developer Efficiency Read More »
With rising regulatory pressure in Europe, many organizations are being urged to leave US-based cloud providers. For engineering teams, this can be daunting if it’s a first migration. This post offers a clear, practical plan to guide the move, reduce risk, and prevent costly surprises.
How to Plan and Perform a Successful Migration? Read More »
Learn how NIS2 impacts platform engineering and get practical implementation insights with Kyverno. This guide helps you overcome “analysis paralysis” and take the first steps toward NIS2 compliance.
Automating NIS2 Compliance in Kubernetes with Kyverno: A Practical Guide Read More »
The upcoming NIS2 directive will impact all industry sectors. They will have to tighten up the security of their applications, or risk heavy fines. Learn how a Kubernetes-based platform can reduce the time and cost to implement certain security measures, as needed to comply with the upcoming EU NIS2 directive.
The Business Value of a Kubernetes-Based Platform Read More »
For decades, the “build-measure-learn” mantra guided SaaS innovation. Today, compliance with regulations is crucial, especially in sectors critical to society like healthcare. This blog presents Swelife’s 7-step innovation process, blending creativity with compliance. From clarifying ideas and mapping information flow to meeting regulatory requirements, learn how to innovate smartly and securely in today’s landscape.
The 7-step Innovation Process Read More »
NIS2 is on everyone’s mind and it is natural to worry about the implementation burden that NIS2 would bring on your organization. In this post, we’ll illustrate what the NIS2 Directive really means for you who is a CTO or Engineering Manager.
NIS2: But what exactly do I need to do? Read More »
In this blog post, we present what the recently passed EU NIS2 Directive is and how it will increase the security of networked IT systems in the EU.
All You Need to Know About NIS2 Read More »
One of the most common challenges for companies needing data security is choosing between security and efficient software development. And, of course, understanding the risks associated with this trade-off.
Digital Sovereignty for European Companies Read More »
Prorenata uses Welkin and Elastx to ensure all data stays in Sweden – meeting GDPR, Patientdatalagen, and ISO-27001 demands. With a fully managed platform, their team can focus on innovating for school healthcare and winning public procurements.
Prorenata’s Strategic Move: Bringing Their Application Back Home Read More »
Discover the journey behind a lost public procurement and gain insights into the evolving landscape of GDPR implementation. Learn from past experiences and navigate data protection regulations effectively.
The GDPR Storyline: From “Let’s Wait and See” to “We Need to Run in EU Jurisdiction Now” Read More »
Learn how Elastisys helped Data4Life, a German non-profit HealthTech company, establish a process that helped them pass the BSI IT-Grundschutz audit.
Process for Passing the BSI IT-Grundschutz Audit Read More »
This is the second blog post in a series on operating a secure Kubernetes platform. Read the blog post to see why alerting culture is important, an example of how it’s used in practice, why it matters, and its greater context.
Operating Secure Kubernetes Platforms: Alerting Culture Read More »
How should you technically implement GDPR? A myriad of court rulings, opinions, recitals and guidelines has brought much needed clarity.
The GDPR Storyline: From “Business as Usual” to “We Need to Run in EU Jurisdiction” Read More »
Four invaluable pieces of advice for those that migrate from US- to EU-owned clouds for GDPR compliance reasons.
4 Actionable Advice When Moving to EU Clouds Read More »
“But what if we just use encryption?” I get this a lot from CTOs when it comes to GDPR compliance. Can we use US cloud services if we encrypt the data?
“But what if we just use encryption?” – Practical GDPR for CTOs Read More »
How I Stopped Worrying And Started Loving Compliance Ask any developer who just heard “we got a new licence, we need to become compliant” and I bet most of them won’t receive these words with joy: The Chief Risk Officer yells legalease from one side of the corridor (“you need to do access controls”), while
How I Stopped Worrying And Started Loving Compliance Read More »
