Platform Orchestrator · Coming 2026 · EUPL

Sovereign across
every cloud.

A railway signal box — a Stellwerk — keeps every train on the right track. Stellwerk does the same for multi-cloud: a sovereignty layer under your governance that routes workloads across every cloud you run — and refuses the routes that break your rules. Self-hosted by default. No phone-home.

EU · Sovereign Perimeter Developer AI agent Workload spec Resolve Platform InfrastructureSecurityGuardrails EU Sovereign Cloud STACKIT · Telekom · OVH · WX-One AWS · ESC European Sovereign Cloud On-Premises Your data centre · bare metal Any Hyperscaler AWS · Microsoft · GCP Route refused · policy Developer AI agent Workload spec Resolve Platform InfrastructureSecurityGuardrails EU · Sovereign Perimeter EU Sovereign AWS · ESC On-Prem Any Hyperscaler Refused · policy
resolve · 1 spec → 4 targets · 1 refused
The Orchestrator

The signal box for everything you ship.

Developers describe what they need in one portable workload spec. Stellwerk resolves it per environment, applies it through your existing infrastructure-as-code, and refuses any route that breaks policy — in the open, with the rule that stopped it.

  • Self-hosted by default

    No managed control plane. Nothing phones home.

  • Policy at the boundary

    Unsafe routes are refused before they reach a cloud.

  • We are your exit strategy

    Every dependency Stellwerk resolves stays as portable IaC you own — walk away any time and keep everything running.

Our offerings

From first course to critical infrastructure.

The orchestrator is open source and stays that way — EUPL, no proprietary code, ever. What we offer is everything that makes it carry production: knowledge, operation, early security, and support. Five offerings, one route.

  1. 01 · Courses · Certification

    Learning Campus

    Learn the orchestrator from the team that builds it — hands-on courses and certification for your engineers and our partners.

  2. 02 · Implementation + Subscription

    Enterprise Platform

    Partner-delivered

    A resilient, highly available installation in your environment — with blueprints, runbooks, and a subscription that keeps it current. The exit guarantee is contractual: walk away and everything keeps running.

  3. 03 · Private registry · Day 0

    Early Security Channel

    Signed security updates from a private registry, fourteen days before public release — with advisories and SLAs for critical CVEs.

  4. 04 · Retainer

    Platform Architects

    Partner-delivered

    A named senior architect at your side — maturing your platform organization month over month, from assessment to executive readout.

  5. 05 · L3 backed by Stellwerk

    Single Point of Contact Support

    Partner-delivered

    One contact for every incident: certified partners deliver first- and second-level support, Stellwerk engineering stands behind them at third level.

Implementation, architecture, and support are also delivered by our certified partners. Security updates and certification come directly from Stellwerk. Available with the 2026 release — waitlist members first.

Apply as a Friendly Foundational Customer
Waitlist

Be there when the signal turns green.

Join the waitlist for early access, release news, and the documentation. No spam — unsubscribe anytime.

Please enter a valid email address.

The system house or integrator you’d like to deliver with.

Foundational customers shape the product with us and receive a founding offer — we’ll get in touch.