Romanesco Architecture: the portable, isolated, and automated sovereign cloud
The Romanesco architecture is the technical core of the Numspot platform. It combines portability, single-tenancy, and Kubernetes orchestration to operate a sovereign cloud securely and without lock-in.
Portability: move your workloads freely, without dependency
Cloud dependency (or lock-in) is a major strategic risk. Repatriation costs and the blockages tied to proprietary APIs limit companies' operational flexibility. Romanesco integrates portability by design. Three hosting levels, a single foundation
- On-premises, in your own datacenters, under your total control
- Cloud SecNumCloud, a sovereign environment, qualified and audited by ANSSI, for your sensitive and strategic workloads
- Public cloud, for less critical workloads, with the same underlying architecture
Integrated with the leaders in sovereign cloud (Outscale, OVHcloud), the Numspot platform orchestrates your workloads seamlessly according to your cost, performance, or compliance criteria. Load bursting is built-in and included, with no extra charges or hidden data transfer fees. Without dependency on proprietary APIs, you remain free in your technological choices.
Compliance as proof of trust
Portability is only valuable if it is implemented within a controlled framework. The platform's built-in compliance (SecNumCloud, HDS, ISO 27001) attests that every component has been designed from the outset for the highest standards. You no longer have to choose between agility and security.Thanks to its 100% French foundation and the ongoing SecNumCloud qualification, Numspot protects you against extraterritorial laws (CLOUD Act, FISA). Your data remains under French jurisdiction.
Single-tenancy: a dedicated and isolated cloud environment for each organization
In a traditional cloud, isolation between customers relies on software layers: this is the principle of resource sharing. However, these logical isolation mechanisms have already shown their limits, and in a SecNumCloud context, resource sharing is not acceptable.
With Romanesco, Numspot makes the opposite choice: built-in isolation.
Built-in isolation: dedicated compute, storage, and network resources
Each customer gets a space : an isolated environment. It’s not an account, it’s not a logical tenant: it’s a truly dedicated mini-cloud.
- Compute, storage, and network resources that are exclusively yours
- ANo data passes through or resides outside your environment
- Dedicated encryption keys, access policies, and network configurations
The benefits of single-tenancy for your organization
Security
Only your data is present within your environment. Another customer’s data cannot compromise yours, even in the event of a security vulnerability.
Compliance
You get dedicated isolation, not just contractual isolation. Your security audits and certifications are considerably simplified as a result.
Performance
Zero “noisy neighbor” effect. Your performance doesn’t depend on the activity of other tenants.
Native Kubernetes architecture: the foundation enabling portability and single-tenancy
Kubernetes is the open orchestration standard on which all Numspot managed services rely: PaaS, Data & AI. It’s not an add-on — it’s the backbone of Romanesco.
Complete orchestration
Kubernetes manages the application lifecycle, deployments, scaling, and resilience. When a service is deployed, Kubernetes decides where to place it and how to restore it in the event of an incident.
Ensuring single-tenancy
Entire clusters are dedicated to each customer, implementing physical segregation at the orchestration level.
Enabler of portability
Kubernetes is an open standard, not a proprietary format. An application deployed via Kubernetes runs on Numspot, Outscale, OVHcloud, or on-premises without rewriting.
Leverage for delegation
Monitoring, logging, updates, backups: Kubernetes standardizes operations. Your teams can delegate operational management to Numspot and focus on business value.
Romanesco vs. standard clouds
| Criterion | Standard cloud providers | Numspot with Romanesco |
|---|---|---|
| Portability | Proprietary lock-in, repatriation costs, API dependency | Built-in portability: workloads freely movable between on-prem, sovereign cloud, and public cloud |
| Isolation | Shared physical resources, risks related to hypervisor vulnerabilities | Built-in single-tenancy: each customer gets an isolated environment |
| Orchestration | Proprietary formats, limited portability, manual deployment management | Native Kubernetes: open standard guaranteeing portability, resilience, and operations automation |
FAQ - Frequently asked questions
Contact us
The Romanesco architecture means choosing a cloud without compromise: the freedom of built-in portability without proprietary dependency, the security of total single-tenancy isolation, and the simplicity of delegated operational management through Kubernetes. Regain sovereign control of your workloads.
