Service 4 of 7
Infrastructure independently assessed
We independently assess which infrastructure fits your goals: on-premises, a European or international cloud, or a hybrid model.
The yardsticks are cost, risk, operations, and data sovereignty. You receive a review of the current state, a comparison of the options against criteria agreed on in advance, and a reasoned recommendation. We earn nothing on hardware, licenses, or operations.
45 minutes, free of charge, by video.
How ready is your initiative for a decision? Find out in 3 minutes.
What it is about
The right infrastructure, measured against your criteria
On-premises, cloud, or both: infrastructure decisions often bind a company for many years. Yet they are frequently made under time pressure, for example before a contract renewal or after a security incident, and on the basis of vendor offers.
We assess your options independently. Before we compare offers, we agree on the criteria with you: total cost over the full term, risks, operating effort, dependence on individual providers, and the question of who can access your data. Every option is measured against the same yardsticks.
Read more
Data sovereignty calls for an honest assessment. Providers subject to US law can be compelled to hand over data under the CLOUD Act and FISA Section 702, even when the servers are located in Europe. That does not rule such offers out, but it belongs in the assessment. We test our promise as a criterion in its own right: “Ihre Daten bleiben Ihre Daten.” Your data stays under your control.
We also look at the infrastructure from a security perspective: identity and access, network segmentation, and backup and recovery. The outcome is a reasoned recommendation with a roadmap that you can defend to shareholders, auditors, and clients.
What you gain
A decision for years, on a solid basis
A recommendation you can defend
All options are measured against the same criteria, which you agree on with us in advance. The recommendation stands up to questions from shareholders, auditors, and customers.
Cost over the full term
We include operations, licenses, migration, and a possible exit, not just the entry cost. You see what an option really costs over the contract term.
Knowing who can access your data
You learn which data is located where and which jurisdiction applies there. For sovereignty-critical data, we do not recommend US hyperscalers.
Independent of vendors
We are not tied to any provider. The recommendation follows solely from the result of the analysis.
What we analyze
The full picture
- Data center, network, and end-user computing (workstations and devices)
- Cloud and SaaS
- Identity and access, network segmentation, and backup and recovery
- Service providers and operational accountability
- Dependencies and exit options
What you receive
Results that belong to you
- A current-state review of your infrastructure
- A comparison of options against criteria agreed on in advance
- A recommendation with rationale and roadmap
How we work
Four steps, each with a result
- Step 1
Record the current state
We capture data center, cloud services, network, end-user computing, and the contracts behind them.
Result: The current state, contracts included.
- Step 2
Agree on the criteria
You decide with us what counts and how much, before any offer is on the table.
Result: Weighted criteria before any offer is on the table.
- Step 3
Compare the options
We assess on-premises, European and international cloud, and hybrid models against the same yardsticks.
Result: A comparison of all options against the same yardsticks.
- Step 4
Justify the recommendation
You receive a recommendation with rationale, risks, and roadmap.
Result: A recommendation with rationale, risks, and roadmap.
In practice
The contract is expiring, the offer is already on the table
The data center contract expires in a year, and a provider has already submitted a cloud offer. Before any negotiation, we agree on the criteria with the executive team and assess three paths: renew, move to a European cloud, or build a hybrid model. Management decides on the basis of a comparison that discloses cost, risk, and data access, and goes into the negotiation with clear requirements.
A typical scenario as we encounter it in engagements, not a single client case.
Tested in the SIMOSphere AI Lab
What we recommend, we test first. Field reports from our lab on simosphereai.com:
When it pays off
Typical triggers
- Before contract renewals or a cloud decision
- After a security incident
- When clients demand evidence
How it fits your path. Focus in Understand with the BISA baseline assessment, then Architect (target state) and Transform (implementation). Penetration testing is a separate engagement. It always starts with a free 45-minute initial call.
Questions executives ask
Questions executives ask about it
Is a US cloud with a data center in Europe sovereign?
Not entirely. Providers subject to US law can be compelled to hand over data under the CLOUD Act and FISA Section 702, regardless of where the servers are located. We state this difference openly and assess all options against the same yardsticks.
As of October 2026 · not legal advice
How does the assessment stay independent?
You agree on the criteria with us before we compare options. Every assessment is documented so you can follow it.
Who from our company does the infrastructure assessment need?
The head of IT and those accountable for operations and contracts, plus management for the criteria. You decide with us what counts and how much, before we compare options.
Where does an infrastructure assessment start?
With a free 45-minute initial call by video. The BISA baseline assessment on site sets the focus; the target state and implementation follow. Penetration testing is a separate engagement.
Why SIMO
Advice that is on your side
Independent
We are not tied to any vendor. Our recommendation follows the outcome of the engagement.
As peers
Every engagement is led personally by one Managing Partner, from the initial call to handover: Thomas Wassum or Andreas O. Schwan.
Results-driven
Every phase delivers a result that stands on its own. No lock-in, no obligation to continue.
Sovereign
“Ihre Daten bleiben Ihre Daten.” Your data stays under your control. For sovereignty-critical data, we do not recommend US hyperscalers.
Read on
How do you assess cloud sovereignty?
Read the answer: How do you assess cloud sovereignty?What is BISA, and when is it worth it?
Read the answer: What is BISA, and when is it worth it?
Your next step
45 minutes, and you will know whether it fits.
The initial call is free of charge and without obligation. You speak directly with one of our two Managing Partners, by video.
45 minutes, free of charge, by video.
Prefer to assess your position first? Twelve questions, about 3 minutes.
Prefer to call? +49 6021 625 63 40
Note: the 3D visualizations on this page were created with AI.