BlueWhale Stack is one control plane over six public clouds, your virtualization estate and your air-gapped sites. It is run by enterprises, by telco and datacenter operators who sell governed services on it, and by governments that must prove where data lives and who touched it. After connecting, every estate reports into one inventory, one identity fabric and one policy engine — and the audit evidence is generated continuously instead of assembled per inspection.
- < 15 min
- From connecting a cloud account to its first full inventory
- 6 + 5
- Public clouds by API; private platforms by Edge Agent
- 10
- Identity providers federated over SAML 2.0 / OIDC
- 5
- Deployment modes — SaaS, BYOC, on-prem, air-gapped, edge
What it replaces
| You run today | In BlueWhale Stack | Status |
|---|---|---|
| Cloud management platform (CMP) | Inventory & Discovery, Service Catalog and Cloud Connectors — one inventory across six clouds and on-prem, governed provisioning on top | GA |
| Cloud cost tool | Whalenomics — billing joined to inventory, anomalies explained by Whale AI, rightsizing and commitment advice | AI use cases live · backend in progress |
| Observability contract | Observe — logs, metrics, traces, SLOs with burn-rate alerts, synthetics, included in the licence | GA |
| ITSM for cloud operations | ITSM with P0–P4 SLAs, CMDB fed by discovery — or two-way sync with the ServiceNow or Jira you keep | GA |
| IaC and landing-zone tooling | Landing Zone Builder (Control Tower, CLZ, GCP foundations) | Beta |
| Migration assessment suite | Migration Engine — auto-classification, 6R scoring, dependency-aware waves with rollback | Assessment live · execution in progress |
| Compliance evidence spreadsheets | Cloud Audit & Evidence — controls monitored continuously, reports per regime on demand | Enterprise & up |
The architecture, top to bottom
- 1
1 · Industry segments
Enterprise, datacenter, telco, government and SMB consume governed services — each through its own edition of the same platform.
- 2
2 · Digital Experience Layer
Multi-tenant by design: white-label portals, catalog & marketplace, self-service, per-tenant metering & billing, SLA and tenant health — the layer your customers and business units see.
- 3
3 · Unified Platform Core
Nine capability families under one console, one identity, one policy and one bill — the governance engine of the whole estate.
- 4
4 · Integrations
The platform plugs into what you already run — OSS/BSS, ServiceNow/Jira, billing and invoicing, identity & SSO, and an API surface for everything else.
- 5
5 · Every estate
Public clouds, private and virtualization estates, hybrid and sovereign stacks — discovered, governed and billed as one, down to air-gapped and edge sites.
- 6
6 · Deployment modes
SaaS, BYOC on your own clouds, on-premise, sovereign air-gapped, or at the edge — the same product in every mode.
The nine capability families
Management & Delivery
Provisioning, landing zones, blueprints and day-2 operations — delivery with governance built in. Modules: Cloud Connectors, Business Connectors, Partner Connectors, Service Catalog, Landing Zone Builder.
Whalenomics · FinOps
Budgets, forecasts, chargeback and continuous optimization — spend decomposed to workload, department or tenant. Modules: Whalenomics.
Security & Identity
One identity fabric (SAML/OIDC), least-privilege access, continuous scanning — uniform posture everywhere. Modules: Identity & Access, Security.
Governance & Audit
Policy as configuration; controls monitored continuously; the auditor's report generated on demand. Modules: Cloud Audit & Evidence.
Whale AI — incl. offline
AI for operations, documentation and compliance — your choice of model, able to run fully inside the perimeter. Modules: Whale AI.
Migration & Discovery
Inventory, dependency mapping and rehearsed waves with rollback — for entry, movement between estates, and exit. Modules: Inventory & Discovery, Migration Engine.
Observability & ITSM
Health, events and service operations — integrated with ServiceNow, Jira and existing tooling. Modules: Observe, Whale ITSM.
Tenancy & Monetization
Native multi-tenancy, catalogs, marketplace, per-tenant metering and billing feeds. Modules: Tenancy & Monetization.
Sovereign Operations
In-country deployment, segregation, air-gapped classes and offline-tolerant edge. Modules: Sovereign Operations.
Deployment modes
SaaS — Fastest start
First account connected and inventoried in under 15 minutes. Your data stays in the region you choose — Singapore, Mumbai, Dubai, Frankfurt or Los Angeles.
BYOC — your clouds — Nothing re-hosted
On your own cloud accounts — the control plane runs in your AWS / Azure / GCP; nothing is re-hosted to adopt it.
On-premise — Full control
Full control inside your own datacenters, on your virtualization or bare-metal estate.
Sovereign · air-gapped — Disconnected
Fully disconnected operation — including Whale AI offline, in-region models and no call-home.
Edge — offline-tolerant — HQ-grade policy
Plants, branches and bureaus under headquarters-grade policy, tolerant of disconnection.
Every mode runs the same platform build, so moving between modes is an operational decision. Mixed estates are common: a SaaS console governing air-gapped and edge sites through the Edge Agent.
Support and service model
Tiered support
L1/L2 with the customer or partner, L3 with BlueWhale — 24×7 critical bridge at 99.9%.
Implementation
BlueWhale practices — App, Infrastructure and Data Modernization, AI Design — or certified partners.
Product & roadmap
Quarterly releases; customer councils feed the roadmap; no forced upgrades on sovereign estates.
Whale AI tiers
Spark — Standard & up
Entry, fast — summaries, inventory Q&A and sizing recommendations in natural language.
Tide — Enterprise & up
Deep reasoning for migration planning, IaC drafting and multi-cloud analysis.
Abyss — Enterprise · Government (in-region, offline)
Premium multi-step agents for the most complex, cross-module workflows — including fully offline inside the perimeter.
Security posture
- One identity fabric (SAML 2.0 / OIDC) across 10 identity providers, with SCIM auto-provisioning
- Least-privilege, role-based access across every connected estate; credentials AES-256 at rest, TLS 1.3 in transit
- Continuous control monitoring; the report your auditor asks for, generated per regime on demand
- Data residency by region (DPDP — Mumbai, GDPR — Frankfurt); in-country by BYOC, on-prem or air-gapped elsewhere
- ISO/IEC 27001, 27017, 27018, 27701 and ISO 22301 certified; SOC 2 Type II readiness assessment complete
- Air-gapped and in-region deployment for sovereign customers, with WORM-backed audit logs in the Government Edition
The 90-day prototype
- 1
Discovery workshop · Half day
The platform on your estate's shape; success criteria agreed with technology and finance.
- 2
Prototype · 90 days · no licence cost
Full-featured on your own estate: inventory live, cost decomposed, one audit report, one AI use case.
- 3
Evidence review · Day 90
Scored on the agreed criteria — then, and only then, the licensing decision.
- 4
Scale · Quarters 2–4
The control plane extends estate by estate; every environment inherits governance day one.
What buyers ask
What do you need from us to start?
Read-only credentials for one cloud account — an IAM role, an Entra app registration or a Viewer service account — and, for on-prem, one Edge Agent per site with read access to the hypervisor. No inbound firewall rules, nothing on guest VMs.
SaaS, BYOC, on-prem or air-gapped — is it the same product?
Yes, one build. SaaS runs in Singapore, Mumbai, Dubai, Frankfurt or Los Angeles; BYOC runs the control plane in your own AWS, Azure or GCP; on-prem and air-gapped run inside your perimeter with signed offline updates. Moving between modes is an operational decision.
Which parts are generally available and which are not?
Inventory, Cloud Connectors, Identity, Service Catalog (AWS provisioning), Observe, ITSM, Whale AI and the Government Edition are GA. Landing Zone Builder is beta. The Migration Engine's assessment is live with execution hooks in progress; the Whalenomics backend is in progress with its Whale AI use cases live. Tenancy & Monetization is in preview for the Telco & Datacenter Edition, GA Q4 2026.
Does Whale AI send our data to a model provider?
Only on SaaS, in your region, if you choose a hosted model. BYOC and sovereign deployments run your own model or ours in-region; the Government Edition runs Whale AI fully offline with zero external calls.
How does it fit with ServiceNow, Jira and our SIEM?
Tickets sync two-way with ServiceNow and Jira; Observe forwards telemetry and findings to your SIEM; the REST API and webhooks expose everything the console does.
What does an evaluation look like?
A half-day discovery workshop, then a 90-day prototype on your own estate with no licence cost — inventory live, cost decomposed, one audit report, one AI use case — scored on criteria agreed up front.