Compute
Spin up virtual machines and containers across regions in minutes, with full lifecycle control, metrics and auto-shutdown.
Sovereign cloud for regulated and industrial teams
Run everything where you choose.
Get a full cloud anyway.
HiokCloud is a sovereign cloud platform for virtual machines, Kubernetes, object storage, networking and managed databases. Deploy in Canada or France, across hybrid infrastructure, or on your own hardware offline.
- Cloudhosted by us
- Hybridyour own region
- On-premisesfully offline
Your first subscription gets $50 free credit every month — not just once.
Geo-distributed cloud
2 regions live 1 planned
- 🇮🇳Mumbai, INPlanned
- 🇫🇷Strasbourg, FRLive
- 🇨🇦Beauharnois, QCLive
Point at a region for its availability
Three ways to run HiokCloud
Every service, wherever your servers are
Cloud, hybrid and on-premises. Choose where your infrastructure runs, how it connects and who manages it — with one familiar HiokCloud experience.
One platform. Your choice.
Your next deployment. Zero hardware.
Build in our live Canada and France regions. We provide the infrastructure; you choose the resources and where they run.
- Hosted infrastructure
- Canada & France
- One cloud console
Same platform. Three ways to make it yours.Explore data residency
Quantum-safe by design
Post-quantum key exchange for IoT messaging
Attackers already store encrypted traffic, waiting for quantum computers that can break today's key exchange. HiokCloud's IoT devices agree their keys with ML-KEM (NIST FIPS 203) — designed to resist exactly that — and seal every message with AES-256-GCM.
- 1Device and hub agree a key with ML-KEM, a NIST-standard post-quantum algorithm
- 2Every message is sealed with AES-256-GCM, on MQTT, AMQP, CoAP, OPC UA, HTTPS or WebSocket
- 3Recorded traffic remains protected subject to the cryptographic assumptions and implementation
Device certificates can use ML-DSA (FIPS 204) or SLH-DSA (FIPS 205). Storage-account object content and stored credentials are encrypted with AES-256. VM and managed-database volumes are not yet encrypted by the platform; see our Privacy Policy. Use of NIST-standard algorithms does not imply independent FIPS validation of the platform. Encryption coverage and assurance.
Products
Everything you need to run in production
One console, one API, one subscription — every building block of a modern cloud.
Networking
Virtual networks, VPN gateways, peering, firewalls and IP routing — software defined, everywhere.
Storage
Geo-replicated blob containers and file shares with strong consistency and a rich file explorer.
IoT Hub + DPS
Device identities, twins, C2D/D2C messaging and zero-touch provisioning at fleet scale.
API Management
Publish, secure, rate-limit and observe your APIs behind a fully managed gateway.
Live Streaming
Low-latency media for cameras and live content — worldwide, sub-second WebRTC.
Developers first
Ship from your terminal
Everything in the console is scriptable with the HIOK CLI, the Terraform provider and SDKs for C#, TypeScript, Python and Go. Keep your infrastructure as code, wire up CI/CD, manage fleets — without leaving your shell.
$
See the console
One console for everything you run
The same screens in our regions and on your own servers.
Deploy WordPress, Nextcloud, Grafana and more in one step.
One plan
Everything is included. There is no upgrade.
No free tier that withholds the good parts, no enterprise tier that unlocks them, and no sales call to open a cloud account. You pay for the resources you run — never for permission to use the product properly.
The HiokCloud plan — the only one
Every capability, from your first resource
The same platform whether you run one virtual machine or a thousand.
- Compute — virtual machines, container instances and container apps with revisions and traffic splitting.
- Storage — object, blob, block blob, file share and filesystem containers, plus queues and tables.
- Geo-redundancy — replicate to any region you choose, with drift measured rather than assumed.
- Managed databases — PostgreSQL, MongoDB, YugabyteDB and ClickHouse, with a real query editor.
- Private registries — your own container registry with a real certificate, not a self-signed one.
- Networking — virtual networks, subnets, peering, VPN gateways and private remote desktop.
- HIOK Anywhere — run resources on your own hardware as a private region.
- Access control — role assignments that inherit down subscription, resource group and resource.
- Observability — metrics, alerts, diagnostic settings and a full activity log.
- Automation — the CLI, the Python SDK, the Terraform provider and the whole REST API.
- IoT Hub — MQTT 3.1/3.1.1/5.0, AMQP 1.0, CoAP, OPC UA, HTTPS and WebSocket. One version, no device cap.
- Streaming — live streaming endpoints with publish keys and playback.
- Support — included for every account, at no extra cost.
Built to be trusted
Your data, in your region, under your control
Resource data residency
Resource content stays in the regions you select. Account information is replicated between our hosted regions as explained in the Privacy Policy.
Residency by choiceStorage objects and secrets
Storage-account object content and stored credentials use AES-256. VM and managed-database volumes are not yet encrypted by the platform.
AES-256Access controls and activity logs
Resource access controls and tenant networks help protect workloads. Activity logs are available in the console.
Auditable by youRegional infrastructure
Choose an available hosted region, or operate HiokCloud on hardware you control.
Hosted or self-hostedReady to deploy?
Create your first subscription and launch a resource in under five minutes — with $50 free credit.