Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.diekerit.com/llms.txt

Use this file to discover all available pages before exploring further.

Moving to the cloud gives your business access to scalable infrastructure, modern collaboration tools, and reduced capital expenditure — but only if you choose the right model and provider. This guide explains the core cloud service types, the benefits and trade-offs of each, and what to consider when evaluating cloud solutions for your organization.

​
Cloud service models

The three primary cloud service models define how much responsibility you retain versus how much the provider manages on your behalf.
Infrastructure as a Service gives you virtualized computing resources — servers, storage, and networking — over the internet. You manage the operating system, middleware, and applications; the provider manages the underlying hardware.Best for: Organizations that need flexible infrastructure, run custom applications, or want to replicate their on-premises environment in the cloud.Examples: Microsoft Azure Virtual Machines, Amazon EC2, Google Compute Engine

​
Benefits of cloud adoption

Cost efficiency

Replace large upfront capital expenditure with predictable operational costs. Pay only for the resources you use and scale down when demand drops.

Scalability

Scale compute, storage, and services up or down in minutes to match demand — without waiting for hardware procurement or provisioning.

Flexibility

Choose from a wide range of services and deployment models. Mix on-premises, private cloud, and public cloud resources to meet specific requirements.

Accessibility

Give your team access to applications and data from anywhere, on any device. This supports remote work and enables distributed teams to collaborate effectively.

Reliability

Major cloud providers offer high availability, geographic redundancy, and SLAs that are difficult to match with on-premises infrastructure.

Security updates

Providers continuously patch and update the underlying infrastructure, reducing the burden on your IT team and closing vulnerabilities faster.

​
Challenges to plan for

Knowing the limitations of cloud services helps you avoid costly mistakes.
When you store data in the cloud, you must understand where it is physically located. Under GDPR (DSGVO), personal data of EU residents must be processed in accordance with EU data protection law. Ensure your provider can guarantee data residency within the EU or provides appropriate safeguards for transfers outside the EU.
Over-reliance on a single provider’s proprietary services can make it difficult and expensive to switch later. Design your architecture with portability in mind and favor open standards where practical.
Cloud providers secure the infrastructure, but you remain responsible for what you build on it — including access control, data encryption, application security, and configuration. Misconfigurations are a leading cause of cloud security incidents.
Cloud costs can escalate quickly without proper governance. Unused resources, over-provisioned instances, and data egress fees add up. Implement tagging, budgets, and cost alerts from the start.
Misconfigured cloud storage buckets and overly permissive access controls are among the most common causes of cloud data breaches. Review your configuration against your provider’s security benchmarks regularly.

​
Choosing the right cloud provider

Selecting a provider is a strategic decision. Evaluate candidates against these criteria:
1

Assess compliance certifications

Verify that the provider holds certifications relevant to your industry and geography, such as ISO 27001, SOC 2, BSI C5 (relevant for Germany), and GDPR compliance documentation.
2

Evaluate data residency options

Confirm that the provider offers EU data centers and can guarantee your data remains within the EU if required. For German businesses, providers with German data centers and BSI-certified infrastructure offer the strongest guarantees.
3

Review SLAs and uptime guarantees

Understand the provider’s uptime commitments, maintenance windows, and compensation terms. Match these against your own availability requirements.
4

Assess support quality

Evaluate the level of technical support available, response time guarantees, and whether you can reach a human quickly in an emergency.
5

Analyze total cost of ownership

Look beyond compute and storage pricing. Factor in egress costs, support tiers, licensing, and the cost of migration and ongoing management.

​
Multi-cloud strategies

A multi-cloud approach uses services from two or more cloud providers. This can reduce vendor lock-in, improve resilience, and allow you to use best-in-class services from different vendors.
  • Avoids dependency on a single provider’s pricing, availability, and roadmap
  • Allows workloads to run in the region or jurisdiction best suited to their compliance requirements
  • Reduces risk of a single provider outage affecting all your systems
  • Enables you to use specialized services from providers that lead in a particular area
A multi-cloud strategy is not always the right choice. For most small and medium-sized businesses, a well-governed single-provider setup with a solid exit strategy offers a better balance of simplicity and risk management.

​
DSGVO / GDPR considerations for cloud

Processing personal data in the cloud does not exempt you from GDPR obligations — it shifts some responsibilities to your provider while leaving others with you.
Key requirements when using cloud services under GDPR:
  • Execute a Data Processing Agreement (DPA) with your cloud provider before processing personal data.
  • Confirm the provider’s data center locations and ensure data transfers outside the EU comply with GDPR transfer mechanisms (adequacy decisions, Standard Contractual Clauses).
  • Understand the provider’s sub-processor list and ensure you are informed of changes.
  • Apply appropriate technical and organizational measures (TOMs) to protect data in the cloud, including encryption at rest and in transit and access controls.
When you are ready to move workloads to the cloud, see the cloud migration guide for a step-by-step approach. For securing your cloud environment, refer to the IT security best practices guide.
Last modified on May 22, 2026