Tjenester
Sovereign, quantum-safe engineering services
Rådgivnings- og arkitekturydelser, der fører organisationer mod post-kvanteklar, suveræn og industriel infrastruktur — fra første vurdering til fuld industrialisering.
Proven sovereignty
EU data residency, legal control, European encryption and HSMs, documented subcontracting chains.
Compliance by design
Evidence packs, ICT registers (DORA), exit plans (Data Act), identity and trust (eIDAS / EUDI).
Measurable execution
SLA/SLO-forpligtelser, KPI/OKR-opfølgning, kontraktmæssig reversibilitet, åbne formater og API'er.
Strategic offerings
Each offering pairs a clear deliverable with its business value and its intended client focus.
Quantum-Safe Architecture Assessment
Evaluate cryptographic exposure, TLS, identity and key management against post-quantum threat models.
- Værdi
- Et klart, prioriteret overblik over kvanterisici, før de bliver til eksponering.
- For
- Banks, insurers, critical infrastructure and regulated enterprises.
Post-Quantum Migration Roadmap
En faseopdelt, standardsbaseret plan til at migrere systemer mod hybrid og post-kvante-klar kryptografi.
- Værdi
- En forsvarlig, reviderbar overgangssti med kontrollerede omkostninger og risici.
- For
- CISOs, regulators-facing organizations and public operators.
Sovereign AI Architecture
Design and deploy AI systems with European data residency, governance, traceability and guardrails.
- Værdi
- Pålidelig AI-kapabilitet uden at miste kontrol over data og modeller.
- For
- Institutions, industrials and deeptech scale-ups.
Robotics & Autonomous Systems Architecture
Architect robotics and fleet platforms on ROS 2, edge AI and secure, resilient communications.
- Værdi
- Industrial autonomy built on a secure, maintainable foundation.
- For
- Industrial, logistics, defense-adjacent and energy operators.
Quantum-Inspired Optimization Consulting
Apply classical and quantum-inspired solvers to routing, scheduling and allocation problems.
- Værdi
- Measurable efficiency gains today, without unproven quantum claims.
- For
- Operations, supply chain and industrial engineering teams.
Privat cloud og sikker infrastruktur
Byg suveræne landing zones, hærdede on-prem og hybride platforme med DevSecOps og observability.
- Værdi
- Et reversibelt, compliant grundlag for følsomme og kritiske arbejdsbelastninger.
- For
- Public sector, finance and industrial organizations.
AI Research Copilot Development
Develop research assistants that read literature, extract concepts and generate experiments and notebooks.
- Værdi
- Hurtigere og bedre dokumenterede forsknings- og ingeniørcyklusser.
- For
- R&D labs, deeptech founders and innovation programs.
Enterprise Architecture Refactoring
Modernize, secure and document legacy enterprise architectures around clear, governed standards.
- Værdi
- Reduced technical debt and a credible path to industrialization.
- For
- Large enterprises, integrators and platform operators.
Servicekatalog og vejledende priser (EUR, ekskl. moms)
| Kode | Tjeneste | Beskrivelse | Key Deliverables | Scope (w) | Price Range |
|---|---|---|---|---|---|
| AUDIT | Sovereignty & Compliance Fast-Track Audit (GDPR + NIS2) | Accelereret, komplet vurdering af suverænitet og compliance-status. Vi kortlægger data, aktiver og flows; analyserer mangler i forhold til centrale krav (GDPR: retsgrundlag, fortegnelser over behandlingsaktiviteter, DPIA, registreredes rettigheder; NIS2: risikostyring, logning, hændelsesrespons, kontinuitet, forsyningskæde); evaluerer tekniske og organisatoriske kontroller; og verificerer dataopbevaring og robusthed. Inkluderer workshops med interessenter, dokumentgennemgang og teknisk stikprøvekontrol (IAM, kryptering, logs, sikkerhedskopier). Afrapportering til ledelse og drift: prioriteret risikoregister, hurtige gevinster inden for 30/60/90 dage, afhjælpningsefterslæb, RACI, sporings-KPI'er og en compliance-kurve. Tilvalg: færdigbygget dokumentationspakke til tredjepartsrevisioner. | Gap-analyse, risikoregister, 90-dages plan | 3–5 | 25k–60k |
| SLZ | Sovereign Landing Zone. EU qualified cloud | Design and deploy a sovereign EU Landing Zone (accounts/projects, networking, security, identity) using Infrastructure as Code. Scope: network segmentation (VPC/VNet, private links), policies and guardrails, EU KMS/HSM-managed encryption, identity and access (SSO, RBAC, PAM), key/secret management, centralized logging with SIEM integration, backups, bastions, tagging/FinOps. Aligned to GDPR/NIS2 (data residency, timestamped logs, separation of duties). Knowledge transfer and documentation (runbooks, diagrams, ADRs). Option: CI/CD pipelines for environments and ready-to-use workload blueprints (Kubernetes/VM/Serverless). | LZ design, IaC, identity, logging | 5–7 | 60k–120k |
| MCP | MCP Server + EU LLM PoC | Opsæt en sikker enterprise-assistent baseret på MCP (Model Context Protocol) og EU-hostede/behandlede LLM'er. Definer use cases, tilslut datakilder (RAG, intern søgning), implementer MCP-værktøjer (tools, politikker), sikkerhedsforanstaltninger (PII-filtrering, handlingsgrænser, revisionslogge) og vælg/benchmark modeller (open source eller EU-udbydere). Deploy til hærdet VPC/on-prem (privat netværk, stærk autentificering, nøgleisolering). Evalueringsrapport med kvalitet/recall, hallucinationsrate, latens/omkostninger, sikkerhed, compliance og anbefalinger til industrialisering. Tilvalg: adminportal, telemetri og prompt-sporbarhed. | Secure assistant, guardrails, eval report | 6–16 | 120k–260k |
| MIG | 2–3 App-migreringer til kvalificeret cloud / hærdet on-prem | Migreringsprogram for 2–3 kritiske applikationer til en EU-kvalificeret cloud eller en hærdet on-prem-platform. Trin: kortlægning og analyse (afhængigheder, data, SLA'er), målstrategi (rehost/refactor/re-platform), forberedelse af Landing Zone, sikkerhedshærdning (IAM, zero-trust-netværk, hemmeligheder), CI/CD-pipelines, ydelses- og sikkerhedstest, DR/backup. Detaljeret overgangsplan (vinduer, rollback, kommunikation) og driftsrunbooks. Risikostyring (leverandørkontrakter, licensering, kompatibilitet), forandringsledelse og overdragelse. Resultat: minimeret nedetid, forbedret sikkerhed, observerbarhed og omkostningsstyring. | Target arch, runbooks, cut-over | 9–17 | 180k–420k |
| OBS | Observability & Data Quality foundation | Establish the foundations of observability (logs/metrics/traces) and data quality. Tooling architecture (OpenTelemetry/agents, data catalog/lineage), logging standards, SLO/SLA metrics and error budgets, trace–log correlation, symptom-based alerting. On the data side: define dimensions (completeness, freshness, uniqueness, etc.), executable DQ rules in pipelines, controls at critical points, dashboards, and data contracts between producers/consumers. Integrate with incident/problem management, runbooks, and a maturity review. Result: end-to-end visibility, reduced MTTR, and higher trust in datasets. | DQ rules, SLAs, metrics, dashboards | 5–10 | 70k–160k |
| DORA | DORA/TLPT readiness audit & remediation plan | Readiness assessment for DORA and TLPT (Threat-Led Penetration Testing) for financial entities. Scope definition and critical functions, ICT asset register, risk governance, operational controls (logging, backups, incident response), third-party dependencies and continuity. Build an evidence pack, article-by-article gap mapping, prioritized remediation plan with owners and deadlines. Pre-design a TLPT program: adversary-led scenarios, threat-intel objectives, legal prerequisites, and third-party coordination. Executive readout and a compliance/resilience roadmap. | Evidence pack, TIC register, scenarios | 4–8 | 85k–190k |
| EUDI | eIDAS 2.0 / EUDI wallet integration blueprint | Integration blueprint for the European Digital Identity Wallet (EUDI) under eIDAS 2.0. Design the trust architecture (issuers, holders, verifiers), verifiable credentials & identity flows, QTSP integration and trusted lists, protocol choices and UX for journeys (onboarding, consent, selective disclosure, QES). Security: secure storage, proof-of-possession, replay protection, logging. Pilot use cases (KYC, qualified e-signature, application access), KPIs (conversion, latency, fraud prevented), and governance (attribute lifecycle, revocation). Compliance dossier and industrialization plan. | Trust architecture, pilots, KPIs | 8–16 | 220k–480k |
| RUN | Managed Sovereign Ops — NOC/SOC/FinOps | Sovereign managed operations med NOC/SOC/FinOps. Overvågning, detektion og respons døgnet rundt, change- og sårbarhedsstyring, patching, backup/DR-tests, compliant logopbevaring. SOC: use cases, korrelationer, threat hunting, rapportering og vejledning efter hændelser. FinOps: tag-baseret allokering, ressourceoptimering, budgetadvarsler og månedlige gennemgange. SLA-understøttede forpligtelser (svartider, tilgængelighed), skræddersyede runbooks samt månedlige/kvartalsvise styringskomitéer. Integreres med kundens egne værktøjer eller en Eurathos-administreret stak. | 24/7 overvågning, hændelseshåndtering, rapporter | — | 12k–45k / måned |
| CIO | CIO/CISO Advisory Retainer | CIO/CISO advisory on retainer. Strategisk rådgivning og beslutningsstøtte (make/buy, sovereign cloud, data/AI), programstrukturering, styrekomitéer, bestyrelsesklargøring og compliance-tilsyn (GDPR/NIS2/DORA/eIDAS). Arkitektur- og sikkerhedsgennemgange, leverandør due diligence, RFP/RFI-støtte og teamcoaching. Inkluderer et defineret antal dage pr. måned, en prioritetskanal og tematiske sessioner (cyberkrise, kontinuitet, ansvarlig AI). Tilbagevendende leverancer: executive briefs, roadmaps og handlingsorienterede anbefalinger. | Board briefs, steering, reviews | — | 6k–20k / måned |
Resultater efter 90 dage
- Overensstemmelsesrevision klar til tilsynsmyndigheder (rapporter og dokumentation).
- PoC MCP + LLM EU operationel til en konkret use case.
- Suveræn landing zone udrullet og plan de reversibilite underskriver.
Referencer og økosystem
- Cloud & certificeringer: Kvalificerede europæiske økosystemer (SecNumCloud / ENS / C5).
- AI: Mistral, Aleph Alpha (private udrulninger i EU).
- Betroede tjenester: QTSP, kvalificerede signaturer, EUDI Wallet.
- Offentlige udbud: TED/eForms og relevante CPV-koder.
SLA'er og SLO'er
- Svar: P1 inden 30 min (24/7), P2 inden 4 t (i arbejdstiden), P3 inden 2 dage.
- Tilgængelighed: 99,9 % månedlig oppetid for administrerede tjenester.
- Rapportering: Månedligt KPI/OKR-dashboard, kvartalsvise ledelsesgennemgange.
Vilkår
- Priser ekskl. moms, licenser, cloudforbrug og rejseudgifter.
- Adgang til interessenter, systemer og dokumentation garanteret af kunden.
- Sikkerhedsgodkendelser mulige (påvirker leveringstid og priser).
- Ændringer via Change Requests i Jira-projektet SVC-PORTFOLIO.