Private Cloud · Open-source infrastructure
Anyone can download CloudStack, OpenStack, Ceph, KVM, Kubernetes, or Proxmox. Running them as a reliable private cloud is the hard part. ZSoftly designs, builds, and operates the stack around your workloads, jurisdiction, governance, and team.
Moving off VMware? We scope and execute full migrations to an open-source virtualization platform. No licence renewal pressure, no vendor lock-in.
ZSoftly operates and manages private cloud and bare metal deployments across carrier-neutral and enterprise-grade facilities globally. ISO 27001, SOC 2, HIPAA, and HITRUST certified sites. Your data stays in the jurisdiction you choose.
Architecture and operating model
Most providers ship one opinionated stack and force every customer into it. ZSoftly does the opposite: we start from a proven open-source baseline, then mix and match components for your workloads, compliance posture, integrations, and operational model.
The result is a private cloud shaped likeyour environment instead of a copy of someone else's. No closed virtualization stack, no proprietary agents, no vendor lock-in baked into the architecture. If you outgrow ZCP, you take your workloads. The stack is yours.
Talk to our architects →Hypervisor
Bring your hypervisor preference: KVM, Xen, or evaluation of vendor stacks. We deploy the one matching your operational team.
Orchestration
Your choice of foundation, both fully supported and backed by deep in-house R&D: turnkey Apache CloudStack to stand up fast with less to operate, or fully-flexible OpenStack for maximum control and customization. We scope the right fit for your governance and team in the design workshop. Either way, it is open source and yours, with no lock-in.
Distributed storage
Ceph for most. We have run with alternate distributed-storage choices where customer hardware, performance, or compliance specs call for it.
Networking & firewall
OPNsense is our API-first default where it fits. We also manage pfSense and Netgate appliances, FortiGate firewalls, and customer network switches, integrating the platform that matches your security, automation, and operating requirements.
Private secured connectivity
Connect offices, remote teams, and adjacent environments through managed site-to-site IPsec or WireGuard tunnels. For user and device access, we support a Headscale-managed WireGuard mesh or an approved SaaS zero-trust service when your policy calls for it.
Observability
Prometheus + Grafana + Alertmanager is the default stack. We integrate with your existing Datadog, Splunk, or New Relic when you have one.
Portal & billing
Branded, white-label self-service portal on top of either CloudStack or OpenStack. Headless API-only deployment is supported for customers with their own customer-facing UI.
Identity & SSO
Full single sign-on and social login: Google, GitHub, and any OIDC or SAML provider, or integrate the identity system you already run.
Mix and match, not lock-in.Your private cloud will not look like our reference architecture, and this is the point.
Reference stack details →Public Cloud today
ZCP Public Cloud runs on Apache CloudStack with a third-party licensed cloud management platform on top. It provides the current customer console and the compute, storage, networking, and Kubernetes capabilities available in our regions.
Private Cloud today
We deploy Apache CloudStack or OpenStack with managed Ceph storage, networking, identity, backup, observability, and operations. The management layer follows your operating model, including a white-label CMP or headless APIs.
ZCP CMP next
ZSoftly is building its own CMP to replace the licensed layer, unify public and private-cloud APIs, and add capabilities such as serverless and managed application runtimes.
The private cloud decision
A private cloud is an operating model, not a software download. The platform should fit your workloads and jurisdiction, while the engineering behind it keeps the environment secure, recoverable, observable, and ready for change.
Open-source benefits
Open-source foundations reduce dependence on expensive proprietary virtualization and cloud licensing. Your economics still reflect hardware, people, and support, but the platform does not force one vendor bill.
Choose the compute, storage, networking, identity, and compliance model that fits your environment instead of adapting every workload to one closed stack.
The software can be inspected, audited, extended, and integrated. You are not waiting for one vendor to expose the control or integration you need.
Open interfaces and familiar infrastructure patterns make workloads and operating practices easier to move between your facility, ZSoftly, and other compatible environments.
CloudStack, OpenStack, Ceph, KVM, Kubernetes, and Proxmox support real cloud, hosting, telecom, enterprise, and service-provider environments worldwide.
Operational reality
Installing the software is the easy part. Running compute, storage, networking, identity, and upgrades together is the work.
Capacity planning, patching, monitoring, incident response, documentation, and lifecycle decisions need an owner who understands the full stack.
A host failure, storage latency spike, or network issue does not wait for business hours. Your team needs a tested response model.
Replication, failover, restore testing, recovery objectives, and recovery procedures are part of production readiness. They do not happen automatically.
Upgrade validation, rollback planning, and dev or test capacity add cost. Skipping them moves the cost to the first outage.
Segmentation, firewalls, access control, secrets, patching, hardening, and audit logs need ongoing ownership.
CloudStack, OpenStack, Ceph, Kubernetes, and hypervisor upgrades need compatibility testing, maintenance windows, and an experienced operator.
Portals, billing, monitoring, alerts, backups, identity, automation, and documentation need one operating model or they become disconnected systems.
Internal teams may spend months building the platform, then more time maintaining it, documenting it, and troubleshooting edge cases.
ZSoftly Private Cloud
We bring the benefits of open-source infrastructure together with the people, controls, staging, recovery, and lifecycle discipline needed to run it for real workloads.
ZSoftly designs, builds, operates, and improves the environment with engineers who understand the full stack.
We support day-to-day operations, troubleshooting, upgrades, capacity planning, and incident response, not only the initial installation.
Virtualization, Ceph, software-defined networking, firewalls, VPN, load balancing, backups, and monitoring work as one operating model.
We plan test environments, backup, recovery, replication, failover, and restore validation before production changes begin.
You get a managed experience on open-source foundations, with documented interfaces and a clear path to operate or move the platform.
Private cloud shifts the conversation from proprietary license pressure to visible infrastructure economics, capacity, and operating choices.
We help implement access controls, auditability, network segmentation, secure operations, and policy-driven management.
We plan and execute platform upgrades, host maintenance, storage expansion, and operational improvements with your team.
The value is having the right people available when infrastructure issues become business issues.
ZSoftly operates ZCP, so private cloud delivery is informed by real platform operations, not lab-only deployments.
Bottom line
Anyone can download the software. ZSoftly helps you run it as a reliable private cloud.
You get open-source infrastructure with the engineering, support, backup, disaster recovery, and operational discipline needed for production.
Pricing and service tiers
One-time setup fee + monthly managed service fee. All prices CAD. Prices subject to finalization. Volume discounts available.
One-time
Recurring
All prices CAD. Prices subject to finalization. Volume discounts available. Contact info@zsoftly.ca for a scoped proposal.
Included platform capabilities
The defaults below are the baseline our engineers ship most often. Every layer is negotiable in the design workshop, you tell us your constraints and integrations, we assemble the stack to fit. The operations underneath are non-negotiable: we run it.
Industry-proven IaaS orchestration on Apache CloudStack or OpenStack, both fully supported. API-driven VM provisioning, KVM virtualization, portable workloads.
Distributed block storage for VMs and S3-compatible object storage. NVMe SSD, SSD, and HDD tiers. Replicated across nodes.
OPNsense is our API-compatible default for firewall, routing, DNS, HA, and WireGuard VPN. pfSense, VyOS, and existing enterprise firewalls remain supported when required.
Your clients get a branded self-service portal for VM provisioning, billing, and usage reporting, with single sign-on and social login. Multi-tenant ready.
Single sign-on and social login via Keycloak or Authentik, integrating Google, GitHub, and any OIDC or SAML provider, or your existing identity system.
Included on Standard and above. Full metrics stack, alerting, and dashboards for your operations team.
We hold the infrastructure. We handle upgrades, security patches, and on-call. Monthly check-ins on Starter, SLA-backed on Standard+.
Deployment locations
ZSoftly builds and operates private clouds and bare metal deployments across 28 data center facilities in four countries, with new African capacity planned in Nigeria. Every facility meets enterprise compliance standards. Your workloads stay in the jurisdiction you choose.
Canada
11 locations
Ottawa (ON) confirmed. Additional sites across the country. Canadian-controlled, not subject to US Cloud Act. Government-ready.
United States
Boyers, PA + Manassas, VA
HITRUST i1 certified facilities. Suitable for healthcare, financial services, and US federal compliance requirements.
United Kingdom
London area
UK infrastructure for GDPR and UK data residency. Not subject to US Cloud Act. London area facility.
Europe
Continental Europe
European mainland infrastructure for EU data residency and GDPR compliance. Not subject to US Cloud Act.
Australia
Perth + Melbourne
Australian data residency for APAC deployments. Not subject to US Cloud Act. State-of-the-art facilities opened 2024.
Nigeria
Lagos area (planned)
African data residency on the roadmap. Sovereign infrastructure for Nigeria and West African deployments, in-country and not subject to US Cloud Act.
Facility certifications across ZCP data center locations
GPU infrastructure available for Private Cloud and Bare Metal
GPU-optimized servers are available for private cloud deployments and dedicated bare metal. GPU is not available on the public cloud (ZCP shared infrastructure) at this time. Contact us to discuss GPU options for your private or bare metal deployment.
Get started
Tell us about your current environment: VMware, on-prem, or starting fresh. We'll scope a build-out proposal within a few business days.
ZSoftly Technologies Inc. · 116 Albert St, Suite 300, Ottawa ON K1P 5G3