Managed Platform Governance

Your engineering rules kept current: every repository checked, evidence of every change for your auditors, and costs tied to projects.

Problem

Your standard was true once

A standard is accurate on the day it is signed and decaying by the end of the month. A new team starts, a vendor opens a repo, an agent writes its first module, and the catalogue becomes a list of things that were agreed once. Meanwhile the pipeline and cloud bill grow with nobody able to say which project caused it.

  • • Standards reviewed yearly, at best
  • • Exceptions with no owner and no expiry
  • • Change evidence reconstructed before every audit
  • • Runner and cloud spend with no project attached

Approach

From a standard to a gate

The same rules as your governance model, compiled into policy: evaluated on every commit, swept across every repo, with exceptions recorded against an owner and an expiry. It sits on top of Managed Platform Foundation: the platform service runs the machinery, this one decides and proves what it enforces.

Policy

Your catalogue kept in step with the Cloud² principles and your own. New rules introduced as advisory first, then promoted.

Scan

A continuous sweep of every mapped repo, findings with an owner and an age, alerts for unowned repos, and a monthly posture report.

Assurance

Exception register, approval trail and per-apply evidence: the change evidence pack for ISO 27001, NIS2 and DORA.

Platform FinOps

Runner and cloud spend attributed per project through the mandatory tags. Budgets, anomaly alerts and monthly showback.

What It Costs

Priced to be approved, not evaluated

Onboarding comes with the landing zone and is folded into the monthly fee on a 12-month term: policy set compiled from your catalogue, every repo in the register scanned for a baseline, exception register seeded, review workflow wired to your change process, scorecards for your top three projects, evidence routed into your SIEM, and FinOps baselined so the first report has real numbers in it.

From €500

Per month, flat

Per customer, regardless of how many VCS organizations your code lives in.

None

Repo meter

Nobody counts repos and nobody argues at renewal. Tool licences pass through on top.

2

Step

Included in every tier.

People And Agents

The gate decides, for everyone

Every coding-agent conversation eventually arrives at one question: can we let it write our infrastructure, and how would we know? With Managed Platform Governance you already have the answer. Agent-written pull requests go through the same gate as human ones, and the evidence records which one it was.

Templates and catalogue

One set of blueprints every team, vendor and agent starts from.

Policy as code

Rules at agreed enforcement levels, evaluated on every commit.

Secrets and dependencies

Secret scanning, dependency upkeep and pinned providers across every repo.

Principle to resource

A trace from each principle to the resources it governs, with a record at every repo root.

FAQ

Common questions

We run our own platform team. Can we buy only governance?
Yes. Some customers run their own platform and only want governance on top. Each service stands on its own.
Which policy tools do you use?
OPA and Checkov in the pipeline, plus the VCS platform’s own rulesets, branch policies and scanning. Third-party tools are supported where you already have them, with licences passed through.

Explore More

Services that work together

Ready to Get Started?

Let's discuss how Cloud2's Managed Platform Governance service can help you achieve your goals.

Cloud Infrastructure