Cloud Migration

We rebuilt and migrated a BSI C5-compliant hospital platform in months after another provider spent over a year on it. For Telekom, we cut infrastructure cost by 50 % at 99.98 % availability.Your migration starts with an inventory and ends with a platform your team runs or we do.

TRUSTED BY TEAMS AT:

  • Deutsche Telekom logo: white stylised letter T on a magenta background
  • Uniper logo in blue, showing the word "uniper" split across two lines.
  • GOLDBECK logo in bold black uppercase letters on a white background
  • PwC logo featuring the lowercase letters "pwc" in black with two orange diagonal shapes above
  • Vattenfall logo with the name in dark grey bold letters and a circle split into yellow upper half and blue lower half on the right
  • Schwarz-produktion logo on a white background reading “SCHWARZ PRODUKTION” in white text inside a dark blue square.
  • Cornelsen logo — white bold wordmark on a red background
  • Meridiam logo with tagline "for people and the planet" in dark green on a white background.

What exactly is Cloud Migration?

Not moving servers from A to B. Anyone can do that and end up with the same problems on a more expensive bill. A real migration is a set of decisions: what moves as it is, what gets modernised, what stays on-prem for good reason. And it means sorting out security, compliance and monitoring before production traffic moves, not after the first incident.

At iits, cloud architecture, software engineering and CloudOps sit in one team. So you don't just arrive in the cloud. You arrive able to run it.

Sovereign cloud or hyperscaler? Both, if it makes sense.

We're a long-standing T Cloud Public partner and build on STACKIT, AWS, Azure and GCP. So the platform question gets answered by your data, your regulator and your budget, not by whoever we happen to resell.

Several people seated along a long wooden table in a wood-paneled room, attending a workshop with laptops and drinks on the table.

Modernise where it pays, move where it doesn't

Not every workload deserves a rewrite. We decide per application whether it's rehosted, replatformed or refactored, based on business value, dependencies and what it costs to run afterwards. You get a portfolio decision you can defend to finance.

Two colleagues sitting at a wooden table, each focused on their own laptop.

Day-two operations, built in from day one

A migration is done when your team can run the platform. Landing zone as code, GitOps deployments, monitoring and backup live before traffic moves. Runbooks and dashboards included or our CloudOps team keeps operating it for you.

Three people sit on green armchairs in a bright lounge, chatting beside a laptop and a small table.

Why this survives the cut over

We migrate the systems others won't touch. KRITIS, healthcare, petabyte-scale data on sovereign cloud or hyperscaler, whichever the regulator and the workload demand.

Send Inquiry
  • Built for regulated and critical workloadsKRITIS, hospitals, utilities, carriers. BSI C5 controls and GDPR requirements designed into the platform, with audit evidence available from day one.
  • Platform choice follows workload and regulationT Cloud Public or STACKIT when the regulator says so, AWS, GCP or Azure when the workload does. Leading T Cloud partner, direct line to T-Systems.
  • Petabytes, not pilotsProduction data at petabyte scale, with transfer plans and cut-over windows that hold.
  • 55 Terraform modules, 40 Helm chartsEvery landing zone from a tested library, deployed via GitOps. Built from tested, reusable modules rather than one-off infrastructure.
  • We stay after go-live, if you wantKumoOps: fixed monthly price, incident response under 15 minutes, live chat instead of tickets.

Four steps. No surprises at the end.

  1. Step 01

    Know what you're moving

    Inventory, dependencies, compliance needs, TCO per workload. The business case before the first ticket.

  2. Step 02

    Build the foundation once

    Landing zone from our Terraform and Helm library: network, identity, encryption, guardrails. BSI C5 and GDPR designed in.

  3. Step 03

    Move in waves, rehearse every one

    Low-risk first. Each wave has a dry run, a rollback path and a downtime window you knew about in advance.

  4. Step 04

    Go live, hit the numbers, hand over

    We stay until availability and cost meet the targets from step one. Then your team runs it, with runbooks or we do.

CGM logo — a dark blue sphere with white lettering and a grey arc — centered on a light and dark blue wave-pattern background.
CASE STUDY · HEALTHCARE

A BSI C5 Compliant Cloud for Healthcare Patient Portals

Complete redesign and migration of the healthcare infrastructure to the T Cloud Public with BSI C5-compliant security, including client isolation and complex integration of hospital networks.

Read the full case study

Areas we support in

Healthcare

BSI C5-compliant hybrid platforms with strict tenant isolation on sovereign cloud

Telecommunications

Carrier-grade systems: >99.98 % availability, incident response under 15 minutes.

Energy & Utilities

Plant data and analytics with data residency and OT integration.

Education & Publishing

Content and commerce platforms your own team can run afterwards.

After iits took over management of our project in December 2022, we saw a remarkable improvement in the performance and efficiency of our systems. The seamless transition under the same terms as our previous IT service provider, combined with ongoing optimizations, has not only reduced our costs by 50% but also increased the availability of our applications to over 99.98%.
Deutsche Telekom logo — white stylized letter T with square cutouts on a magenta backgroundStefan MarienfeldHead of Solution Management · Deutsche Telekom AG

What we build with.

Proven modules, not a blank Terraform file. 55+ modules, 40+ Helm charts, built with a solid platform engineering mindset.

CLOUD PLATFORMS
  • T Cloud Public
  • STACKIT
  • AWS
  • Azure
  • GCP
INFRASTRUCTURE & DELIVERY
  • Terraform
  • OpenTofu
  • Kubernetes
  • Helm
  • GitLab
  • Argo CD
  • CI/CD
  • Flux CD
SECURITY & IDENTITY
  • Keycloak
  • Vault
  • Cert-Manager
  • Kyverno

That humming noise in the basement? We can fix it.

Send a non-binding project inquiry and find out what it would take to move it, what it would cost to run, and whether it's worth it at all.

AVG. RESPONSE < 1 WORKING DAY