Cloud consulting in Madrid, now that all three big clouds run regions in Spain

What changed for Spanish cloud buyers

For years, a Madrid company that wanted its data hosted in Spain had to use a local data centre or a smaller provider. That is no longer the case. Google Cloud opened its Madrid region in 2022. AWS opened its Europe (Spain) region in Aragón the same year. Microsoft opened its Spain Central region in the Madrid area in 2024. Oracle runs a Madrid region as well.

This changes the conversation. Data residency in Spain is now a design choice rather than a reason to stay on old servers. It also means more Spanish companies are reviewing where their workloads should live, and many are finding that their existing cloud setup grew without a plan.

What our cloud consulting covers

• Current-state review: what runs where, who has access, what it costs and what breaks
• Architecture: landing zones, networks and identity on AWS, Azure or Google Cloud, sized for real demand
• Region choice: when to use a Spanish region, another EU region or a mix, and why
• Migration: moving servers, databases and applications with tested rollback plans
• Security: least-privilege access, encryption, logging and backups that have been restored at least once
• Cost control: idle resources removed, machines right-sized and commitments planned
• Ongoing operations: monitoring, patching and monthly reviews, with response times agreed in writing

Choosing a region: Spain, elsewhere in the EU, or both

Keeping personal data inside the EU is what the GDPR cares about most. Keeping it inside Spain is usually a business or contract choice rather than a legal must, but it can matter a great deal for public sector work, regulated clients and customers who simply ask for it.

Spanish regions are newer, so not every service is available in all of them yet, and prices can differ from long-established regions such as Frankfurt, Paris or Ireland. We check which services you need, compare cost and latency, and then recommend a region or a combination. The decision and the reasons behind it are documented, so your auditors and customers can follow the logic.

Security rules Madrid firms are working through

Banks, insurers and investment firms headquartered in Madrid now operate under DORA, the EU Digital Operational Resilience Act, which has applied since January 2025. It asks for tested resilience, incident reporting and close oversight of technology suppliers, including cloud providers. NIS2 brings stricter security duties to many other sectors, such as energy, transport, health and digital infrastructure, across the EU.

Companies that supply the Spanish public sector are often asked about the Esquema Nacional de Seguridad, Spain's national security framework. We build environments with the controls these frameworks expect: logged access, segregated environments, documented recovery tests and clear supplier records. We do not certify you, but we make the evidence easy to collect.

Typical Madrid cloud projects

• Moving an ERP and file servers from an ageing on-premises room to a Spanish cloud region
• Building a secure data platform for group reporting across Spain and Latin America
• Hosting a customer portal or e-commerce site that has to stay up through Black Friday and the January sales
• Cleaning up a cloud account that grew over five years without tagging, budgets or access reviews
• Setting up separate development, testing and production environments for an in-house software team
• Preparing evidence for a DORA or NIS2 supplier review

Keeping the bill under control

Cloud bills grow quietly. Test environments are left running, storage builds up, and machines chosen for a launch stay oversized for years. A monthly cost review usually finds savings without touching performance. We tag every resource by owner and project, set budgets with alerts, and show the bill by department so each team sees what it spends. We do not promise a figure until we have seen your account.

Talk, Plan, Build, Grow for cloud

• Talk: 15 minutes on what you run, what worries you and any deadlines such as a contract renewal or an audit.
• Plan: an assessment, region recommendation, security baseline and migration plan in writing within 5 to 7 days.
• Build: engineers set up the foundation and move workloads in planned windows, with rollback ready.
• Grow: monthly cost, security and performance reviews, and changes as you add systems or markets.

How we support Madrid from outside the city

Cloud work is remote by nature. Planned changes are booked into a change window you approve, with a written rollback plan and an engineer watching each step. When a project includes physical work, such as retiring servers from a Madrid data centre, we either plan a visit or coordinate with your facilities provider, and we agree which at the scoping stage.

Proof that we hold dates

We have broadcast more than 20 live events, where nothing can slip, and managed more than $1.5M in projects. The same discipline goes into migration windows and launch dates. We do not name clients publicly but will walk through relevant examples on a call.

What sets the price

• Number and complexity of workloads, and whether they are migrated or built new
• Regions needed and any residency requirements
• Security frameworks in scope, such as DORA, NIS2 or ENS
• Whether you want ongoing managed operations and the response times you need
• Your cloud provider charges, which you pay directly

Questions

Which cloud regions are in Spain?

Google Cloud runs a Madrid region, AWS runs its Europe (Spain) region in Aragón, Microsoft Azure runs Spain Central in the Madrid area, and Oracle has a Madrid region. Service availability varies by region, so we check what you need before recommending one.

Does the GDPR require our data to stay in Spain?

No. The GDPR is mainly concerned with data leaving the EU. Keeping data in Spain is often a business, contract or public sector requirement rather than a legal one. Your legal adviser confirms what applies to you.

What does cloud consulting in Madrid cost?

It depends on the number of workloads, the security frameworks involved and whether you want ongoing support. We price after the planning stage, and provider charges are paid by you directly.

Can you help with DORA requirements?

We build cloud environments with the controls DORA expects, such as tested recovery, logged access and supplier documentation, and help gather evidence. Your compliance team and advisers remain responsible for the overall DORA position.

Do you work with AWS, Azure and Google Cloud?

Yes, all three. We recommend based on your existing licences, skills and the services you need. Many Madrid companies on Microsoft 365 lean towards Azure, but that is not always the best fit.

Can you migrate without downtime?

Most migrations need only a short planned pause. We test the new environment with real data first, schedule cutover in a quiet window and keep a rollback ready. Dates are agreed in writing.

Book a 15-minute call.

A fit check, not a pitch. A few questions, an honest answer and a clear next step. Not every call ends in a proposal.

Book 15 minutes