Cloud
Get started
Geo-distributed, secure cloud platform

One cloud.
Our regions, or your building.

Deploy in any region and keep your data in sync. Encrypted at rest and isolated per network.

Need it on-premises? Turn your own servers into HiokCloud — every service, not a subset — offline, or as a region of your own.

Your first subscription gets $50 free credit every month — not just once.

110 ms88 ms196 ms🇮🇳 central-indiaMumbai, IN · coming soon🇫🇷 eu-west-sbgStrasbourg, FR · live🇨🇦 canadaBeauharnois, QC · live
2 regions live 1 coming soon
  • 🇮🇳Mumbai, INComing soon
  • 🇫🇷Strasbourg, FRLive
  • 🇨🇦Beauharnois, QCLive
Point at a region for its status and latency
Three ways to run HiokCloud

Every service, wherever your servers are

Not a cut-down edition: virtual machines, networks, storage, databases, containers, Kubernetes, IoT, streaming, API management — literally every HiokCloud service runs the same way in all three.

1

Fully in our cloud

Sign up and deploy in HiokCloud regions in Canada and France. No hardware, nothing to install.

2

On-premises, disconnected

Turn your own servers into a complete HiokCloud. Everything stays in your building and runs with no internet at all. Connect only when you choose — to receive security patches or upgrade services — then disconnect again.

  • Air-gapped operation
  • Updates on your schedule, never forced
3

Connected: your own region

Link your data centre to HiokCloud and it becomes a region, managed from hiokcloud.com next to ours.

  • Private region — only your organisation deploys there.
  • Public region — other HiokCloud customers can deploy on your hardware, and you earn from the capacity they use.
Your data centreThe complete HiokCloud platformNo internet neededOutbound tunnel · no open portshiokcloud.comManaged from the consoleUpdate package — optionalUsers reach it through our edge

Everything stays inside your building. Nothing calls home, nothing needs the internet to start or keep running. When you want a patch, bring in an update package — or never.

Quantum-safe by design

Traffic recorded today stays unreadable tomorrow

Attackers already store encrypted traffic, waiting for quantum computers that can break today's key exchange. HiokCloud's IoT devices agree their keys with ML-KEM (NIST FIPS 203) — designed to resist exactly that — and seal every message with AES-256-GCM.

  • 1Device and hub agree a key with ML-KEM — no quantum shortcut exists
  • 2Every message is sealed with AES-256-GCM, on MQTT, AMQP, CoAP, OPC UA, HTTPS or WebSocket
  • 3Captured traffic is noise — today, and to a quantum computer later

Device certificates can be issued under ML-DSA (FIPS 204) or SLH-DSA (FIPS 205). Everything else you store is encrypted at rest with AES-256.

DeviceIoT HubML-KEMAES-256-GCMQuantum computer7de9·3651·8d64
Products

Everything you need to run in production

One console, one API, one subscription — every building block of a modern cloud.

Compute

Spin up virtual machines and containers across regions in minutes, with full lifecycle control, metrics and auto-shutdown.

VMs · Containers · Browser SSH

Networking

Virtual networks, VPN gateways, peering, firewalls and IP routing — software defined, everywhere.

VNets · VPN · Peering · Firewall

Storage

Geo-replicated blob containers and file shares with strong consistency and a rich file explorer.

Blobs · File shares · Geo-replica

IoT Hub + DPS

Device identities, twins, C2D/D2C messaging and zero-touch provisioning at fleet scale.

Twins · C2D/D2C · Zero-touch

API Management

Publish, secure, rate-limit and observe your APIs behind a fully managed gateway.

Gateway · Keys · Rate limits

Live Streaming

Low-latency media for cameras and live content — worldwide, sub-second WebRTC.

RTSP · RTMP · WebRTC · HLS
Developers first

Ship from your terminal

Everything in the console is scriptable with the HIOK CLI and SDKs for C#, TypeScript, Python and Go. Automate deployments, wire up CI/CD, manage fleets — without leaving your shell.

hiok — zsh
$
See the console

One console for everything you run

The same screens in our regions and on your own servers.

hiokcloud.com
The HiokCloud marketplace: WordPress, Nextcloud, Grafana, n8n, Gitea and Metabase, deployable in one stepEvery HiokCloud service, by categoryCreating a virtual machine with a live monthly cost estimate

Deploy WordPress, Nextcloud, Grafana and more in one step.

One plan

Everything is included. There is no upgrade.

No free tier that withholds the good parts, no enterprise tier that unlocks them, and no sales call to open a cloud account. You pay for the resources you run — never for permission to use the product properly.

The HiokCloud plan — the only one

Every capability, from your first resource

The same platform whether you run one virtual machine or a thousand.

  • Compute — virtual machines, container instances and container apps with revisions and traffic splitting.
  • Storage — object, blob, block blob, file share and filesystem containers, plus queues and tables.
  • Geo-redundancy — replicate to any region you choose, with drift measured rather than assumed.
  • Managed databases — PostgreSQL, MongoDB, YugabyteDB and ClickHouse, with a real query editor.
  • Private registries — your own container registry with a real certificate, not a self-signed one.
  • Networking — virtual networks, subnets, peering, VPN gateways and private remote desktop.
  • HIOK Anywhere — run resources on your own hardware as a private region.
  • Access control — role assignments that inherit down subscription, resource group and resource.
  • Observability — metrics, alerts, diagnostic settings and a full activity log.
  • Automation — the CLI, the Python SDK, the Terraform provider and the whole REST API.
  • IoT Hub — MQTT 3.1/3.1.1/5.0, AMQP 1.0, CoAP, OPC UA, HTTPS and WebSocket. One version, no device cap.
  • Streaming — live streaming endpoints with publish keys and playback.
  • Support — included for every account, at no extra cost.
Built to be trusted

Your data, in your region, under your control

Your data stays where you put it

Each resource lives in the region you pick. It is copied to another region only if you ask.

Residency by choice

Encrypted at rest

Secrets and stored files are sealed with AES-256, and replicated between regions still encrypted.

AES-256

Checked on every resource

Access is decided per resource, networks are isolated per tenant, and every change lands in a log you can read.

Auditable by you

Dedicated hardware

Dedicated servers, not oversubscribed shared tenancy, with low-latency links between regions.

Not oversubscribed

Ready to deploy?

Create your first subscription and launch a resource in under five minutes — with $50 free credit.