Operations | Monitoring | ITSM | DevOps | Cloud

Sovereignty is a concept that can have shown nuances in the way it is currently used by states and industry to describe some services. The term “strategic autonomy” has also been used, as to describe the need for governments to ensure that they have a hand on the full value chain (or at least know the gaps and accept the risks) and can apply their rules while it seats in its jurisdiction (autonomy derives from the greek autos (self) nomos (rule).

For decades, digital accessibility in state-funded higher education has largely been a "reactive" game. If a student with a visual impairment reported an issue with a tuition portal, the university would scramble to provide an accommodation. As long as the institution could show "meaningful progress" toward compliance, it was generally shielded from significant legal repercussions. That era is officially ending. The U.S.

Welcome to Beyond the horizon, a monthly series celebrating the people who shape Upsun’s culture, innovation, and heart. In this month’s edition, we’re featuring Ana Cidre, Director of Developer Advocacy at Upsun and one of the key voices shaping how developers experience our platform today and in the future.

For a CTO, "four nines" represents a commitment to keeping production revenue live with less than 0.01% of total downtime per year. As AI workloads move from pilot projects into core production services, the reliability requirements for infrastructure have shifted. AI agents, RAG pipelines, and automated LLM workflows depend on a consistent platform state.

This post is also available in German and in French. The 2026 AI landscape has shifted from "Can we build it?" to "How much will it cost to run it?" For CTOs and engineering leaders, the challenge is no longer just model performance: it is the underlying infrastructure sprawl that silently erodes margins. When AI workloads scale, they often inherit the inefficiencies of legacy cloud models: over-provisioned instances, fragmented data pipelines, and a lack of unified context.

The initial hype of AI agents is hitting a hard reality: a clever prompt is not a production strategy. As organizations move from experimentation to operationalizing AI in 2026, a systemic bottleneck has emerged: It is not the model's intelligence; it is the model’s context and its access to the right tools. When an AI agent lacks access to live, grounded platform data, it guesses.

In regulated industries like fintech, healthcare, and government, DevOps teams often find themselves acting as human compliance gateways. The pressure to maintain strict security standards while accelerating release cycles creates a compliance tax: a heavy burden of manual environment setups, security review tickets, and the inevitable scramble for evidence before an audit. This manual labor, or toil, is more than a drain on productivity. It creates a dangerous gap between policy and actual operations.

The decision to migrate a production application is rarely about the destination. It is about the friction of the journey. For most engineering leaders, the word "migration" is a synonym for "refactor." The industry has conditioned us to assume that moving to a modern cloud platform requires throwing away years of stable configuration, learning a new proprietary DSL, and rewriting core application logic to fit a specific container or serverless model.

In a recent technical evaluation by Journal du Net (JDN), Upsun (formerly Platform.sh) was recognized for its ability to "pull ahead" (tire son épingle du jeu) in a fiercely competitive market dominated by cloud giants and specialized pure players. While hyperscalers offer raw power, Upsun’s strategic fusion of enterprise reliability and AI-ready agility has redefined expectations for modern PaaS.

Most teams think about OAuth the same way they think about logging. It is necessary, familiar, and supposedly solved. Then it hits production. Suddenly, it is not just one authentication flow. It is a complex web of two or more applications, multiple environments, cookies, redirects, secrets, and route boundaries. The uncomfortable truth is that OAuth security is not just an implementation detail. It is an operational system, and that system is only as strong as the platform it runs on.