offering.json

{
  "about": "Machine-readable summary of the Camunda 8 Self-Managed on STACKIT offering from Consid. Companion to README.md (prose) and schema.jsonld (schema.org graph). Facts here are the same as the ones in README.md and on the landing page.",
  "name": "Camunda 8 Self-Managed on STACKIT",
  "summary": "A reference architecture and delivery approach from Consid for running Camunda 8 Self-Managed on STACKIT, the sovereign German cloud operated by Schwarz Digits (Schwarz Group). Process data, backups and logs stay in German data centres. The whole platform is delivered as Terraform, Helm and GitOps into the customer's own Git repository.",
  "provider": {
    "name": "Consid",
    "legalName": "Consid GmbH",
    "url": "https://www.consid.com",
    "email": "anfrage@consid.com",
    "contact": "Jordes Havekost — Camunda on STACKIT, Consid Germany",
    "foundingDate": "2000",
    "headquartersOfThisEntity": "St. Annenufer 5, 20457 Hamburg, Germany",
    "people": "1800+",
    "offices": "45+ in 6 countries",
    "customers": "700+ active",
    "countries": ["DE", "SE", "NO", "DK", "FI", "PL"],
    "isReseller": false
  },
  "sources": {
    "landingPageEn": "https://ai.consid.cloud/camunda-on-stackit-offering/",
    "landingPageDe": "https://ai.consid.cloud/camunda-on-stackit-offering/de.html",
    "repository": "https://github.com/consid-germany/camunda-on-stackit",
    "readme": "https://github.com/consid-germany/camunda-on-stackit#readme",
    "schemaOrgGraph": "https://ai.consid.cloud/camunda-on-stackit-offering/schema.jsonld",
    "llmsTxt": "https://ai.consid.cloud/camunda-on-stackit-offering/llms.txt"
  },
  "canonical": "https://ai.consid.cloud/camunda-on-stackit-offering/",
  "inLanguage": ["en-GB", "de-DE"],
  "datePublished": "2026-07-28",
  "dateModified": "2026-08-07",
  "offerings": [
    {
      "tier": "Advise",
      "name": "Consulting",
      "availability": "available",
      "for": "Teams with their own Kubernetes capability who want a sound design and someone to call.",
      "includes": [
        "Needs and readiness assessment: processes, volumes, integrations, compliance",
        "Target architecture and sizing for STACKIT, with a cost model",
        "Reference Terraform and Helm baseline, handed into your Git",
        "Runbooks for backup, restore, upgrade and incident handling",
        "Support subscription: named contacts, agreed response times, upgrade advisories"
      ],
      "outcome": "You run the platform. We make sure the design is right and you are never stuck."
    },
    {
      "tier": "Build",
      "name": "Implementation",
      "availability": "available",
      "recommended": true,
      "for": "Teams who want the platform built properly — and the knowledge to stay in-house.",
      "includes": [
        "Everything in Advise",
        "Consultants embedded in your team through build and go-live",
        "Landing zone, SKE clusters and data services provisioned with you",
        "Camunda install, SSO, connectors, multi-tenancy and CI/CD implemented",
        "First processes built together; patterns and standards established",
        "Load and failover testing, then a structured handover with enablement"
      ],
      "outcome": "You own it at the end. We make sure you can."
    },
    {
      "tier": "Run",
      "name": "Platform Team as a Service",
      "availability": "preorder",
      "availabilityNote": "Not available yet. The service is being built out; interest can be registered now.",
      "for": "Organisations who want Camunda as an internal product, without hiring the team for it.",
      "includes": [
        "Everything in Build",
        "A dedicated Consid platform team running Camunda on STACKIT for you",
        "On-call cover, SLA-backed incident response, agreed RPO and RTO",
        "Patching, version upgrades, capacity and performance management",
        "Security operations, access reviews and compliance evidence for auditors",
        "Process automation Centre of Excellence: standards, reviews, enablement"
      ]
    }
  ],
  "architecture": [
    {
      "camundaComponent": "Orchestration cluster: Zeebe engine, Operate, Tasklist, Identity",
      "stackitService": "STACKIT Kubernetes Engine (SKE)",
      "why": "Managed control plane, multi-AZ node pools, rolling node replacement"
    },
    {
      "camundaComponent": "Secondary storage: process history and read models",
      "stackitService": "Managed OpenSearch, or Elasticsearch on SKE",
      "why": "Backs the Operate, Tasklist and Optimize views without a self-built cluster"
    },
    {
      "camundaComponent": "Web Modeler and Identity: relational persistence",
      "stackitService": "STACKIT PostgreSQL Flex",
      "why": "Managed HA Postgres with automated backups and point-in-time recovery"
    },
    {
      "camundaComponent": "Backups, exports, documents",
      "stackitService": "STACKIT Object Storage (S3-compatible)",
      "why": "Zeebe and search snapshots, document store, long-term retention"
    },
    {
      "camundaComponent": "Ingress and TLS",
      "stackitService": "STACKIT Load Balancer + DNS, cert-manager",
      "why": "Public or VPN-only endpoints, certificates renewed automatically"
    },
    {
      "camundaComponent": "Metrics, logs, alerts",
      "stackitService": "STACKIT Observability",
      "why": "Prometheus, Grafana, Loki and Alertmanager as a service"
    },
    {
      "camundaComponent": "Credentials",
      "stackitService": "STACKIT Secrets Manager",
      "why": "No secrets in Git, rotation without redeploying the chart"
    },
    {
      "camundaComponent": "Authentication and SSO",
      "stackitService": "Your identity provider over OIDC",
      "why": "Entra ID or Keycloak — existing groups, MFA and joiner/leaver process"
    },
    {
      "camundaComponent": "Provisioning",
      "stackitService": "STACKIT Terraform provider, Helm and ArgoCD",
      "why": "One pipeline from empty STACKIT project to a running cluster"
    }
  ],
  "blueprintAlsoIncludes": [
    "Isolated STACKIT project per environment (dev / stage / prod)",
    "Private networking — no public engine endpoint unless you want one",
    "Camunda multi-tenancy for several business units on one cluster",
    "Connectors and job workers in your language of choice"
  ],
  "delivery": [
    {
      "step": 1,
      "name": "Assess",
      "what": "Workshops on process landscape, volumes, integrations, compliance and existing platform capability. Output: requirements, cluster sizing, target architecture and cost model."
    },
    {
      "step": 2,
      "name": "Landing zone",
      "what": "STACKIT organisation and projects per environment, networking, IAM roles and least-privilege service accounts, Terraform state backend, Git repository and CI/CD pipelines."
    },
    {
      "step": 3,
      "name": "Platform build",
      "what": "SKE clusters, PostgreSQL, search, object storage, ingress, observability and secrets — all as code. Backup and restore configured and rehearsed."
    },
    {
      "step": 4,
      "name": "Camunda rollout",
      "what": "Helm-based install per environment, SSO wiring, connector setup, tenants, resource limits and partition layout, then a load test against your expected throughput."
    },
    {
      "step": 5,
      "name": "Go live",
      "what": "First processes to production: cutover, runbooks, alert routing, on-call handover and a documentation walk-through with the people who will carry the pager."
    },
    {
      "step": 6,
      "name": "Support and evolve",
      "what": "Your team runs the platform, with us on call for it: upgrade advisories inside Camunda's support window, architecture and cost reviews, new processes onboarded, enablement for your developers."
    }
  ],
  "timeline": {
    "assessment": "about one week",
    "firstProductionCluster": "typically a few weeks after kick-off",
    "note": "The platform rolls out from a proven Terraform and Helm baseline via GitOps, so infrastructure takes days. The calendar time goes to decisions, integrations and go-live."
  },
  "sovereignty": {
    "dataResidency": "Germany",
    "operator": "Schwarz Digits (Schwarz Group), a German company",
    "thirdCountryTransfer": "none in the default architecture",
    "gdpr": "Infrastructure built for GDPR: data residency in Germany, a German processor, private networking, encrypted storage, least-privilege IAM and audit trails. Compliance also depends on how process data is modelled and retained, which is covered in the assessment; the customer's legal and data-protection team signs off on the finished design.",
    "usCloudAct": "STACKIT is operated by Schwarz Digits, not by a US-headquartered provider. Whether that fully satisfies a specific regulatory position is a legal question for the customer's counsel; Consid supplies the technical detail for that assessment.",
    "codeOwnership": "The customer owns the platform and the code. Everything is delivered as code into the customer's Git repository. No proprietary Consid tooling in the runtime path; the exit path is documented from the start.",
    "exitPath": "documented from the start"
  },
  "licensing": {
    "camundaLicenceRequired": true,
    "note": "Camunda 8 Self-Managed requires a commercial licence from Camunda for production use. The customer negotiates and contracts it directly with Camunda. Consid is not a reseller and takes no margin on licensing, but can help size the licence and join the conversation. Budget it separately from Consid fees and STACKIT infrastructure cost."
  },
  "considRunsItItself": "Consid operates its own Camunda 8 Self-Managed platform on STACKIT, built from the same Terraform and Helm baseline. Upgrades, backup and restore procedures and runbooks are exercised there first.",
  "nextStep": "A 90-minute assessment workshop, no charge and no obligation. Reply within two working days, a 30-minute call, then the workshop, then a written recommendation covering architecture, effort and a cost model.",
  "trademarks": "Camunda is a trademark of Camunda Services GmbH. STACKIT is a brand of the Schwarz Group. Consid is an independent service provider."
}