BlueWhale Stack gives large, regulated enterprises one control plane for every estate on the Enterprise Edition — a unified inventory across six public clouds and on-prem, governed provisioning, bundled observability, continuous control evidence and a migration assessment engine. Available today as SaaS in five regions, BYOC in your own accounts, or fully sovereign.
- 12
- Modules in the Enterprise Edition
- 6 + on-prem
- Public clouds plus VMware, Hyper-V, Nutanix, OpenShift, KVM
- 50+
- Whale AI use cases grounded in your data
- 3
- Deployment models for this edition — SaaS · BYOC · Sovereign
The regimes, and the control that answers each
| Regime | What it demands | The control that answers it |
|---|---|---|
| GDPR / DPDP | Personal data kept in-region, processing evidenced | Region selection per estate — Frankfurt or Mumbai on SaaS, in-country on BYOC; residency enforced and logged |
| Internal control frameworks (SOC 2-style, ISO 27001) | Controls operating continuously with evidence, not sampled quarterly | Cloud Audit & Evidence: policy as configuration, controls monitored continuously, findings routed to owners |
| Board and internal-audit reporting | One trusted picture of estate, cost and risk | Reports generated from the same inventory, billing and audit trail the operators use |
| Vendor security review | The platform itself independently assessed | ISO/IEC 27001, 27017, 27018, 27701 and ISO 22301 certified; SOC 2 Type II readiness assessment complete |
What Regulated Enterprise teams get
- Manage AWS, Azure, GCP, Oracle, Alibaba, Huawei and on-prem in one inventory, grouped by workload with owners
- Standardise provisioning through a governed catalog with approval policy and Whale AI sizing
- Run bundled observability — logs, metrics, traces, SLOs — without a separate monitoring contract
- Keep control evidence current with Cloud Audit & Evidence, and produce the report the auditor asks for on demand
- Assess workloads for migration with 6R scoring; deploy as SaaS, BYOC or fully sovereign
Use cases
Identity sync & auto-provisioning from your IdP
Federate Okta, Auth0 or Entra ID; SCIM maps directory groups to platform roles, so a new hire logs in once and is granted the right role — and is offboarded on the next directory sync. Modules: Identity & Access.
One inventory across every cloud and on-prem
Discover every resource across six public clouds plus on-prem and hybrid, grouped by workload, with exportable reports for stakeholders and the API for your CMDB. Modules: Inventory & Discovery, Cloud Connectors.
Standardized, governed provisioning
Standardise delivery through a governed catalog (AWS live) with approval workflows and Whale AI sizing, integrated with ITSM so every change is tracked. Modules: Service Catalog, Whale ITSM.
Bundled observability & migration assessment
Logs, metrics, traces and SLOs bundled in, and a 6R assessment of on-prem workloads when you are ready to move. Modules: Observe, Migration Engine.
Delivered engagement — Global media network, Doha
A Doha-headquartered media network put broadcast, streaming, archive and worldwide bureaus under one governance plane, ran Whale AI on its own models inside the perimeter for archive intelligence and transcription, and decomposed production cost per channel and programme.
- Zero
- External AI data exposure
- Arabic-English
- Offline archive AI
- Per-program
- Cost visibility
“The newsroom now uses AI for archive search and transcription every day, and every prompt and every document stays on our own systems. Sources and unpublished work have never left the building.”
Procurement, hosting and integration questions
We already run a CMP and a monitoring tool. What changes?
Both are covered by the platform licence — inventory, catalog and Observe — so the usual outcome is retiring two contracts and two identity systems. Existing tools can stay connected during the transition.
SaaS, BYOC or sovereign — how do we choose?
SaaS in Singapore, Mumbai, Dubai, Frankfurt or Los Angeles is the fastest start. BYOC runs the control plane in your own AWS, Azure or GCP accounts. Sovereign is for estates that must have no external dependency. All three run the same build.
How long until we see our whole estate?
A cloud account is inventoried within about 15 minutes of its connector going green; an on-prem site follows the Edge Agent install. Most enterprises have the full picture inside the first week of the 90-day prototype.
Platform certifications
ISO/IEC 27001:2022, ISO/IEC 27017, ISO/IEC 27018, ISO/IEC 27701 and ISO 22301, independently audited by accredited bodies; a CSA STAR Level 1 self-assessment, a GDPR compliance assessment and a SOC 2 Type II readiness assessment. Certificates and verification numbers are in the Trust Center.