Moving to an EU cloud taught us that sovereignty isn't about EU versus US. It's about whether you can still choose where your data sits, at rest and in transit. In the end, that comes down to who holds the keys.

To make our architecture more secure and less dependent on any single platform, we started an RVO-funded collaboration with Infinity Technologies. Their continuity plans have been tested in wartime, not in rehearsals. That experience changed our design.

We also learned from their market. Many Ukrainian SMEs can't afford the big cloud platforms and the secret managers that come with them. So they manage secrets themselves, often in pipeline variables or config files that get copied around and rarely changed. A single leak can be enough to compromise a system. We applied our patented MindYourPass technology, which already protects passwords for people, to the secrets that machines use to authenticate to each other. We have successfully piloted it with clients in Ukraine.

This talk is for you if you are working on data sovereignty, exploring collaboration with Ukrainian companies, or looking for a better way to protect secrets in your pipelines. Expect a technical story and lessons learned: architecture, access models, and the decisions that cost us the most.