EU-Sovereign Cloud Operating Platform

One platform to run your entire cloud.Provision. Secure. Optimize.

Sencai unifies provisioning, security, FinOps, and AI-assisted operations across your cloud providers and your own on-prem servers - one control plane, so a small team can operate like an enterprise platform group.

Fleet coverage
Cloud + on-prem
Cloud providers
8 integrated
Time to first deploy
< 30 minutes
The problem

Multi-cloud is the norm. Managing it is chaos.

More than 80% of organizations run on two or more cloud providers - each with its own API, billing, and security model. The result is a tool sprawl that small teams cannot keep up with.

01

Tool sprawl without a central view

Dozens of disconnected dashboards, each provider speaking its own language. Context switches kill productivity.

02

DevOps talent is scarce and expensive

A senior engineer runs €9,000–14,000 per month in Western Europe, with 5–6 months to hire. Most teams can't afford the wait.

03

Security gets bolted on - or skipped

Unpatched CVEs, expiring certificates, open ports. 80% of incidents are preventable with automated checks.

04

FinOps stops at dashboards

Cloud waste accounts for 27–35% of infrastructure spend. The problem isn't visibility - it's the absence of automated action.

The product

One dashboard. Every server, every euro, every finding.

Cloud instances, on-prem machines, spend, and security findings - unified in a single pane your whole team can read.

What you get

Everything your platform team would build - already built.

Built around what platform teams actually do all day. No bloat, no feature theater.

Infrastructure

Cloud Provisioning

Provision, scale, and retire compute, managed databases, object storage, and DNS across EU providers (Hetzner, OVHcloud, Scaleway, UpCloud) and global ones (AWS, Azure, Google Cloud, DigitalOcean) - from a single API and UI.

Import & Discovery

Already running in the cloud? Connect an account and Sencai discovers your existing VMs, networks, and storage - then promotes them into managed resources without re-provisioning anything.

Fleet Management

A lightweight agent for cloud instances, on-premise, and bare-metal servers - monitoring, patch management, software inventory, and a browser SSH terminal. Kubernetes clusters join the same fleet via Helm.

Day-2 Operations

Runbook Automation

Codify your incident response once, run it everywhere. Approval-gated runbooks executed by the fleet agent turn 3 a.m. firefighting into a reviewed, one-click action.

AI Operations

Automated root-cause analysis, alert correlation, and remediation recommendations powered by a pluggable LLM backend with per-tenant cost guardrails.

Monitoring & Alerting

Centralized metrics for CPU, memory, disk, and network across your entire estate, with alert routing to email, Slack, and webhooks.

Trust & Compliance

Security & Compliance

CVE scanning on container images, CIS benchmark and Lynis hardening checks on VMs, automatic SSL/TLS renewal, and a policy engine with governance scoring - NIS2 evidence collection built in.

Immutable Audit Trail

Every action lands in an append-only, hash-chained audit log - tamper-evident and verifiable end-to-end. Exactly the evidence trail NIS2 and GDPR reviews ask for.

Identity & Access

Single sign-on with Microsoft Entra ID and Google Workspace, SCIM provisioning, two-factor authentication, and fine-grained roles with just-in-time elevation - enterprise identity from day one.

Business & Teams

FinOps

Real-time spend by service, project, and environment. ML-flagged cost anomalies, right-sizing recommendations, and budget alerts - with automated actions (Autopilot) on the roadmap.

Developer Platform

Go, Python, and TypeScript SDKs, a GraphQL API, and Terraform export of everything you manage - automate Sencai the same way you automate your infrastructure.

Built for MSPs & Agencies

Manage every client organisation from one login. Scoped, time-boxed cross-tenant access with approval workflows keeps client boundaries intact.

Works with the clouds you already use

Native integrations for European and global cloud providers - bring your own accounts, or let Sencai provision and bill capacity for you.

  • VultrComing soon
  • Akamai (Linode)Coming soon
  • Oracle CloudComing soon
  • IBM CloudComing soon
How it works

From signup to operating - in under an hour.

No sales calls required. Connect your cloud accounts, let Sencai audit your estate, and act on the recommendations.

  1. 01

    Sign up and connect

    Register and start your 14-day trial - no credit card required - then connect your cloud accounts via secure API keys or IAM roles.

  2. 02

    Automated audit

    Sencai discovers and inventories your existing infrastructure, then scans for CVEs, misconfigurations, cost anomalies, and expiring certificates.

  3. 03

    Unified dashboard

    See every resource, every euro spent, and every security finding in one place. Prioritized recommendations, no noise.

  4. 04

    Ongoing optimization

    Continuous monitoring, automatic certificate renewal, and weekly savings reports. Your platform, on autopilot.

Built on European foundations

Security, sovereignty, and compliance are baked into the platform - not bolted on.

  • EU Data Sovereignty

    Workloads and metadata stay in European jurisdictions.

  • GDPR Compliant

    Data handling aligned with EU privacy regulation.

  • NIS2 Ready

    Immutable, hash-chained audit trails, a policy engine, and governance scoring back every account - not just a badge.

  • Security-First Architecture

    CVE scanning, SSL automation, and CIS benchmarks from day one.

  • EU Cloud Providers

    First-class support for Hetzner, OVHcloud, Scaleway, UpCloud and more.

Security & Trust

Security you can verify - not just trust.

Sencai manages access to your infrastructure, so our security bar has to be higher than most SaaS. Here's how we protect your accounts, your data, and your audit evidence.

Tamper-evident audit trail

Every action in the platform is recorded in an append-only audit log protected by cryptographic hash chaining. Tampering is detectable, and the complete history can be verified at any time - exactly the evidence trail NIS2 and GDPR reviews ask for.

Credential protection

Cloud credentials you connect are encrypted at rest, never displayed back or written to logs, and never visible to other tenants. Every use is audit-logged, and you can revoke access at any time.

Identity & access

Single sign-on with Microsoft Entra ID and Google Workspace, SCIM user provisioning, two-factor authentication, and fine-grained role-based access with just-in-time elevation and approval workflows - so day-to-day access stays scoped to what's actually needed.

Continuous hardening

Automated CVE scanning, CIS benchmark checks, automatic SSL/TLS certificate renewal, and strict isolation between customer organisations. Security runs continuously in the platform - not as a yearly checkbox exercise.

European by design

Built and operated by an EU company under EU law. Platform data stays in European jurisdictions, and your workloads run wherever you choose - including EU-only providers.

Compliance & due diligence

NIS2-oriented evidence collection, governance scoring, GDPR-aligned data handling, and SOC 2 / ISO 27001 documentation for enterprise procurement and vendor reviews.

Found a vulnerability? Email security@sencai.space - we respond within two business days and credit reporters who want to be credited.

Preparing a vendor review? Request our DPA and security documentation at sales@sencai.space.

Pricing

Transparent pricing. No surprises.

Pick the tier that fits your team. Upgrade, downgrade, or cancel anytime. Annual billing saves ~17%.

Two independent plans: the Organisation tier covers your company's infrastructure, while your personal plan is about you - AI assistance, automations, and how many organisations you can own.

Starter

For small teams and startups shipping their first cloud workloads.

299/month
  • Up to 5 users
  • Up to 3 cloud environments
  • Up to 150 managed resources
  • 20 GB private registry with CVE scanning
  • Automatic SSL/TLS certification
  • Basic VM security scanning (CIS)
  • Monitoring, alerting, basic FinOps
  • Email support (3 business days)
Start 14-day trial

Business

For larger SaaS, e-commerce, and compliance-heavy organizations.

1,599/month
  • Up to 50 users
  • Up to 50 cloud environments
  • Up to 3,000 managed resources
  • 1 TB private registry + advanced CVE scanning
  • Policy engine, governance scoring & NIS2 evidence reporting
  • Advanced FinOps: forecasting, multi-cloud comparison
  • SSO (Microsoft Entra ID, Google Workspace), SCIM, advanced RBAC
  • Dedicated onboarding
  • Priority chat + phone (24×5), 2h response
  • 99.95% SLA
Start 14-day trial

Enterprise

For large organizations and regulated industries. Custom pricing.

from3,500/month
  • Unlimited users, environments, resources
  • Everything in Business
  • On-premise deployment option - the Fleet agent runs the same way on cloud or bare metal
  • Dedicated customer success manager
  • Custom integrations
  • Multi-org management
  • SOC 2 / ISO 27001 documentation
  • Custom SLA and contracts
  • 24×7 premium support, dedicated engineer
  • 99.99% SLA
Contact sales

Every organisation starts with a full-featured 14-day trial - no credit card required (fair-use limits apply during the trial). When it ends, pick a tier to continue - your configuration and data are kept. One managed resource = one compute instance, managed database, storage bucket, or DNS zone managed through Sencai.

Prices shown monthly, billed in EUR. Annual billing saves approximately 17% (two months free). All plans include EU data sovereignty and GDPR-compliant data handling. Organisation and personal plans are billed independently - an organisation's plan governs what that organisation can do, while each member's personal plan governs how many organisations they can own or manage.

Business

Beyond SaaS: on-prem and partnerships.

Critical systems that can't leave the building, and partners who want to build on the platform - both are first-class at Sencai.

Sencai On-Prem

For critical and strategic systems, Sencai ships as an on-premise edition: an annual licence with support included, delivered as a complete server - hardware, software, and installation. Optionally with a local AI server that automates the platform entirely on-site.

  • Annual licence with support included
  • Delivered as a complete server: hardware, software, installation
  • Optional local AI server - platform automation without data leaving your building
  • Rack or tower form factor, per agreed terms
  • Built for critical and strategic systems that must stay in-house
Talk to us about On-Prem

Partner with Sencai

We're opening the platform to partners: cloud providers who want to be available in the Sencai catalog, and feature providers who extend the platform or sell their licences and functions through the Sencai services marketplace.

  • Cloud providers: get listed in the Sencai catalog
  • Feature providers: extend the platform with your own functions
  • Sell licences and services through the Sencai marketplace
  • Reach EU-focused customers through a single integration
Become a partner
FAQ

Frequently asked questions

The short version of what prospects usually ask us. Something missing? Ask below.

What exactly is Sencai?

A control plane over infrastructure you already own. Connect your cloud accounts and your on-prem servers, and Sencai gives you provisioning, security scanning, cost management, monitoring, and AI-assisted operations in one place - instead of a dozen consoles and point tools.

Do I have to migrate anything?

No. Connect your existing cloud accounts and Sencai imports the infrastructure you already run - VMs, networks, and storage are discovered and promoted to managed resources without re-provisioning. Starting fresh? Sencai can provision and bill new capacity for you directly.

Which cloud providers are supported?

Eight today: Hetzner, OVHcloud, Scaleway, UpCloud, AWS, Microsoft Azure, Google Cloud, and DigitalOcean. Vultr, Akamai/Linode, Oracle Cloud, and IBM Cloud are on the roadmap.

Can Sencai manage servers outside any cloud?

Yes - this is one of the things that makes Sencai unusual. The fleet agent enrolls on-premise and bare-metal servers exactly like cloud instances: monitoring, patching, inventory, runbooks, and a browser SSH terminal, no cloud account required. Kubernetes clusters join via a Helm chart.

Where does my data live?

Your workloads never leave your own accounts and servers. Platform data is handled under GDPR by an EU company and is designed to stay in European jurisdictions.

How does pricing work?

Two independent axes: an organisation plan (what your organisation can do, from €299/month) and a personal plan (your own AI assistance, automations, and organisation quota, from free). Every new account starts with a 14-day full-access trial - no credit card required.

Do I pay the cloud providers, or Sencai?

For most teams the simplest path is to let Sencai provision and bill the capacity: one contract, one invoice, predictable pricing across every provider. Already have cloud accounts, contracts, or credits? Bring them along (BYOC) - many customers run managed capacity for new workloads with their existing accounts connected alongside.

How is the platform secured?

Encrypted credential storage, an immutable hash-chained audit log, continuous vulnerability scanning, SSO with 2FA, and role-based access with just-in-time elevation. See the Security & Trust section on this page.

Ready to take control of your cloud?

Join the teams building on European-sovereign infrastructure. Start today - no sales call required.

Get in touch

Talk to the team building Sencai.

Have questions about deployment, security, or pricing? Drop us a line and we'll get back within one business day.