Aruba Cloud vs Webswing

Compare Aruba Cloud and Webswing on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Amazon Web Services (AWS), Microsoft Azure

Aruba Cloud

Italy· Cloud Computing

Needs review

Shortlist Aruba Cloud when you need Italian-entity IaaS with OpenStack public cloud, VMware private cloud (Pinnacle Partner), bare metal/GPU, and ACN-oriented PA packaging on proprietary EU campuses. Skip when you need hyperscaler global breadth or a fully public subprocessor directory—consider OVHcloud or Scaleway instead for multi-country European IaaS with different tradeoffs.

EU-operated (IT)OpenStack public cloudVMware Pinnacle PartnerISO 27001 (claimed)ACN-qualified (claimed)Proprietary EU data centers

View listing Visit Website

Webswing

Ireland· Cloud Computing

Needs review

Shortlist when you must browser-enable an existing Java Swing/JavaFX/SWT/NetBeans or Oracle Forms estate without a rewrite and can run a self-hosted session tier. Skip when you are building a greenfield web UI only, or when the app depends on video, 3D acceleration, or ultra-low-latency graphics. Consider Citrix/VDI or a hyperscaler cloud desktop when you need generic desktop remoting beyond Java UI toolkits.

EU-operatedSelf-hostedISO 27001 (claimed)No-rewrite Java UIOracle Forms capable

View listing Visit Website

Highlighted rows differ between the two products.

Aruba Cloud vs Webswing: Snapshot
Feature	Aruba Cloud	Webswing
Country of origin	Italy	Ireland
Category	Cloud Computing	Cloud Computing
Open source	No	No
Self-hosted	No	Yes
Headquarters	Italy	Ireland
Legal entity	Aruba S.p.A., Via San Clemente 53, 24036 Ponte San Pietro (BG), Italy; VAT IT01573850516	WEBSWING LIMITED (Webswing Ltd.), 93 Upper George's Street, Dun Laoghaire, A96 V1K8 Dublin, Ireland
Governing law	Italian law (Bergamo courts for non-consumers per T&Cs)	Ireland
US parent / control	No known US parent	No known US parent
CLOUD Act exposure (indicative)	Low	Low
EU-hosted status	Not listed	Unknown
Hosting / residency	Primary compute on Aruba-owned data centers in Italy (Arezzo IT1/IT2, Bergamo IT3, Rome IT4) and Czech Republic (Prague CZ1, Ktiš CZ2). Partner availability zones: Paris FR1, Frankfurt DE1, London UK1, Warsaw PL1. Customer chooses region. Full subprocessor list not public—available on request under processor terms. Optional multi-cloud interconnection to other public clouds for hybrid designs.	Product runtime is customer-operated (on-prem, customer cloud, Docker, or Kubernetes). Vendor Client Portal and marketing site use listed processors including Google Ireland, Meta Ireland, LinkedIn Ireland, and The Rocket Science Group LLC (US) for email marketing; those apply to vendor website/portal data, not to self-hosted application sessions.
Summary	Italian sovereign cloud from Aruba S.p.A.: OpenStack public cloud, VMware private cloud, bare metal/GPU, Kubernetes, and storage on proprietary European data centers—strong fit for Italian PA and EU residency-minded IT.	Self-hosted platform that runs Java Swing, JavaFX, SWT, NetBeans, and Oracle Forms apps in the browser without rewriting them.
Tags	cloud infrastructure sovereign-cloud openstack vmware bare-metal kubernetes gdpr enterprise	self-hosted java desktop-to-web oracle-forms application-modernization on-premise html5 ireland

At a glance: Aruba Cloud vs Webswing
At a glance	Aruba Cloud	Webswing
HQ	Ponte San Pietro (BG), Italy	Dublin, Ireland
Legal entity	Aruba S.p.A.	WEBSWING LIMITED (CRO 564226)
Founded	1994 (group)	2015 (Dublin); product lineage from ~2012
Hosting	Proprietary IT + CZ DCs; partner FR/DE/UK/PL	Not listed
Core stack	OpenStack, VMware, bare metal, K8s	Not listed
Commercial model	Prepaid credit / pay-as-you-go; no free tier	Not listed
Open source product?	No (uses OSS components e.g. OpenStack)	Not listed
Self-hosted?	No (provider-managed cloud/DC)	Not listed
License model	Not listed	Commercial + SLA (evaluation available); AGPL only ≤20.2
Deployment	Not listed	Self-hosted (ZIP, Docker, Kubernetes, cluster)
UI frameworks	Not listed	Swing, JavaFX, SWT, NetBeans, Applets, Oracle Forms

Key capabilities: Aruba Cloud vs Webswing
Key capabilities	Aruba Cloud	Webswing
EU-operated (IT)	Yes	Yes
OpenStack public cloud	Yes	Not listed
VMware Pinnacle Partner	Yes	Not listed
ISO 27001 (claimed)	Yes	Not listed
ACN-qualified (claimed)	Yes	Not listed
Proprietary EU data centers	Yes	Not listed
Self-hosted	Not listed	Yes
ISO 27001 (claimed)	Not listed	Yes
No-rewrite Java UI	Not listed	Yes
Oracle Forms capable	Not listed	Yes

Aruba Cloud

OpenStack public cloud + CMP
Self-service Cloud Servers and Virtual Data Centers on OpenStack with AMD/NVMe-oriented SKUs, unlimited traffic on documented cloud-server lines, and management via the Aruba Cloud Management Platform, APIs, and prepaid credit wallet. Suits test/prod VMs and progressive scale-out inside Aruba's ecosystem—not a hyperscaler global catalog.
VMware private cloud (Pinnacle Partner)
Hosted Private Cloud, Virtual Private Cloud via VMware Cloud Director, unified storage, and DRaaS-style options using enterprise stacks (vendor materials cite Zerto, Veeam, vSphere tooling). Built for teams standardizing on VMware who want European hosting without running their own gear.
Bare metal and GPU for private AI
Dedicated servers in Italian Rating 4 data centers (Arezzo/Bergamo and others) with configurable networking (firewall/switch add-ons) and GPU SKUs aimed at private AI/ML. Full root control and isolation; buyer owns OS security and backups unless add-on protection is purchased.
Managed Kubernetes and cloud-native stack
Managed Kubernetes, Application Platform (container/PaaS), container registry, agentless backup for K8s/VDC, plus ArubaKube R&D around open-source multi-cluster projects such as Liqo. Good for EU teams wanting managed containers without leaving Aruba's network.
Object/block storage and enterprise backup
S3-compatible object storage, block volumes, smart storage, and backup packages (vendor stacks include Veeam and Commvault). Use for data protection and hybrid DR—not automatic full-workload backup unless you buy and configure those services.
European region choice with Italian ACN path
Place workloads across proprietary Italian and Czech sites plus partner zones in France, Germany, the UK, and Poland. Italian ACN-qualified IaaS/PaaS/SaaS positioning targets public administration and regulated suppliers; confirm exact qualified SKUs and region pins in procurement.

Webswing

Browser delivery without rewriting Java UI
Runs Swing, JavaFX, SWT, NetBeans Platform, Applets, and Oracle Forms in HTML5 browsers over WebSockets with no required source changes. End users need a browser only, not a local JRE or plugin.
Customer-controlled self-hosted runtime
Install from a distribution ZIP or containers on your own servers, VMs, Docker, or Kubernetes. Standalone and Cluster Engine modes cover single-node pilots through multi-node scale-out with admin monitoring.
Incremental modernisation beside legacy screens
Modernisation Framework and JsLink let React, Angular, Vue, Vaadin, or APEX components coexist with Java UI so teams can rewrite modules over time instead of a big-bang cutover.
Enterprise auth and session operations
Pluggable security modules include SAML2, OpenID Connect, Keycloak, LDAP, and custom providers. Admin Console adds session mirror view, recording/playback, logs, and multi-tenant path isolation.
Built-in printing, files, and clipboard bridges
Browser-side printing with preview, isolated upload/download folders, and clipboard integration cover common desktop workflows that break in naive remote-app setups.

Assurance & compliance: Aruba Cloud vs Webswing
Assurance & compliance	Aruba Cloud	Webswing
Independent security / no-logs audit	Not applicable IaaS/PaaS provider—not a no-logs consumer VPN. Request customer audit rights / SOC reports under NDA if needed.	On request / NDA Footer states regular security testing is available upon request; no public independent audit PDF found.
ISO 27001	Vendor claimed Vendor publishes ISO 27001 certificate PDF and states ISO 27001 family as a security pillar; also claims 27017/27018/27035. Re-verify cert scope and validity dates in procurement.	Vendor claimed Site footer: Webswing Limited maintains an ISO/IEC 27001-certified ISMS. Independent cert registry entry not verified in this pass.
SOC 2 / SOC 3	Not found Public SOC 2/3 report not found on product pages. Vendor publishes ISAE 3402 report PDF instead—request current assurance package.	Not found No SOC 2/3 claim found on public site pages reviewed.
ISAE 3402	Vendor claimed Certificate/report PDF linked from data-protection resources page.	Not listed
GDPR / EU data protection	Vendor claimed EU/Italian entity; services designed under GDPR; CISPE Code of Conduct claimed; processor terms in cloud T&Cs.	Vendor claimed Privacy policy names WEBSWING LIMITED as Irish controller under GDPR; FAQ states GDPR alignment for company contact data.
US CLOUD Act exposure (indicative)	Partial Italian entity, no known US parent, primary hosting on Aruba-owned EU DCs—not on AWS/GCP/Azure by default. Residual uncertainty: subprocessor list only on request; partner DCs include UK; optional multi-cloud/hybrid to hyperscalers. Indicative only—not legal advice.	Partial EU entity with no known US parent; self-hosted runtime keeps sessions on customer infra. Vendor website/portal lists US-group processor The Rocket Science Group LLC (email) plus Google/Meta/LinkedIn Ireland entities for analytics/ads. Not legal advice.
Data processing agreement (B2B)	Vendor claimed Cloud/data-centre T&Cs Art. 21 appoint Aruba as processor/sub-processor for applicable services; subprocessors available on request with change notice. Confirm signed pack for your SKUs.	Not found Privacy policy references Art. 28 DPAs with Webswing's own processors; no public customer-facing DPA download found. Request during procurement.
CISPE Code of Conduct	Vendor claimed Vendor states CISPE Code of Conduct compliance on product and sovereignty pages.	Not listed
ACN qualification (Italian PA)	Vendor claimed Vendor claims infrastructure up to ACN AI3 and services up to QC3 for public administration. Confirm which products are in scope for your project.	Not listed
EU AI Act	Not applicable Infrastructure provider; Framework AI tool exists as optional capability with customer-responsibility language—not an AI product evaluation.	Not applicable Core product is application delivery/runtime, not an AI system. Prague research affiliate explores AI; not the catalogued product.

Considerations & known limitations: Aruba Cloud vs Webswing
Considerations & known limitations	Aruba Cloud	Webswing
Subprocessor list not fully public	Medium T&Cs say the updated subprocessor list is available on request, not as a public transparency page. Procurement should obtain the current list, countries, and change process before go-live.	Not listed
Partner zones and multi-region choice	Low European network includes partner sites and a UK zone. Residency and latency goals require explicit region selection—not assumptions from marketing 'sovereign cloud' language alone.	Not listed
Customer-owned backups and OS security	Medium Default terms state Aruba does not back up customer data unless a backup service is purchased; customers administer OS, apps, and credentials under shared responsibility.	Not listed
Narrower managed PaaS than hyperscalers	Low OpenStack + VMware + bare metal + K8s cover classic IaaS/private cloud well, but teams expecting AWS/Azure-class managed service density will hit catalog limits.	Not listed
Certificate scope must be verified	Low ISO/ISAE/ACN claims are vendor-published; map each cert to exact products, locations, and expiry before relying on them in a risk register.	Not listed
Higher per-session server resources	Not listed	Medium Docs state each browser session needs more server CPU/memory than a native web app. Capacity planning and Cluster Engine matter for large concurrent user counts.
Video, 3D, and low-latency limits	Not listed	Medium Official overview: video not supported, limited sound, no 3D hardware acceleration, poor fit for real-time action games due to rendering latency.
Proprietary licensing since 21.1	Not listed	Low Current releases require commercial license + SLA. AGPL/public source stopped after 20.2. Source access for licensed customers is via Client Portal rather than a public repo.
Vendor portal/marketing US-group processors	Not listed	Low Privacy policy lists The Rocket Science Group LLC and major ad/analytics vendors for website/portal data. Irrelevant to on-prem session pixels, but relevant if you put sensitive personal data only into vendor portals.
ISO 27001 not independently verified here	Not listed	Low Vendor claims ISO/IEC 27001-certified ISMS on the site footer. Ask for the current certificate and scope before treating it as verified.

Fit

Aruba Cloud

Best fit when

Italian or EU orgs that want compute under Aruba S.p.A. with primary hosting on Aruba-owned Italian/Czech data centers
Public administration and regulated suppliers needing ACN-qualified cloud SKUs (confirm product scope)
VMware shops seeking Hosted Private Cloud / VPC / DRaaS without US hyperscaler tenancy
Teams mixing OpenStack VMs, Managed Kubernetes, object storage, and bare metal/GPU for private AI
Buyers who value Italian-language 24/7 support, CMP self-service, and prepaid credit cost control

Poor fit when

Workloads that need a hyperscaler-wide global region map and deep managed PaaS catalogs (AWS/Azure-class)
Teams that require a fully public, always-updated subprocessor page without a customer request
Buyers who only want lowest-cost bare metal/VPS and do not need VMware, ACN, or enterprise packaging (Hetzner-class shortlists)
Strict Italy-only residency without validating region selection (partner zones include FR/DE/UK/PL)

Consider instead when

When: You need larger multi-country European scale or a broader global PoP footprint than Aruba's network
Consider: OVHcloud
French-scale European IaaS; different PA quals and product tree.
When: You prioritize developer-centric instance catalogs and simpler Paris/Amsterdam-style public cloud
Consider: Scaleway
Stronger developer UX; less Italian ACN/VMware private-cloud depth.
When: You need US hyperscaler ecosystem density, global managed services, and marketplace breadth
Consider: Amazon Web Services (AWS) or Microsoft Azure
US-parent platforms with different jurisdictional posture.
When: You mainly want cost-oriented German bare metal/VPS with less enterprise packaging
Consider: Hetzner
Different country anchor and compliance story; compare catalogs carefully.

Webswing

Best fit when

Enterprises and ISVs with production Swing, JavaFX, SWT, NetBeans, or Oracle Forms applications that must become browser-accessible without a rewrite
Teams that can operate a self-hosted Webswing tier (on-prem, VM, Docker, or Kubernetes) and size CPU/memory per concurrent session
Organisations planning incremental UI modernisation (React/Angular/Vue/APEX) while keeping proven Java screens online
Buyers who want Irish/EU contracting (WEBSWING LIMITED) and customer-controlled residency for application sessions
Public-sector or regulated estates retiring endpoint Java installs or reducing Citrix/VDI dependency for Forms/Swing only

Poor fit when

Greenfield products with no existing Java desktop or Forms UI to preserve
Multimedia, video, 3D-accelerated, or real-time action-game style interfaces (documented limitations)
Teams unwilling to run and scale a server-side session farm for interactive users
Buyers who require OSI-approved open source for the current release line (proprietary since 21.1)

Consider instead when

When: You need generic Windows/Linux desktop remoting rather than Java UI toolkit remoting
Consider: Citrix / enterprise VDI, or Microsoft Azure Virtual Desktop
Webswing FAQ positions itself as a narrower alternative to Citrix for Forms/Java estates.
When: You are rewriting the UI entirely and have no need to keep Swing/Forms screens running
Consider: Native web frameworks (React, Angular, Vue) or Oracle APEX without a Webswing bridge
Webswing's Modernisation Framework is for coexistence during migration, not a mandatory layer for new UIs.
When: You want a hyperscaler-managed browser app streaming control plane
Consider: AWS AppStream / WorkSpaces-class services or Azure cloud desktop offerings
Trade self-hosted EU software control for managed cloud operations.

Open questions for due diligence

Aruba Cloud

What is the current named subprocessor list (group companies and third parties) for the exact SKUs we will buy?
Which products and sites are in scope for the latest ISO 27001 / 27017 / 27018 certificates and ACN AI3/QC3 qualifications?
Can we pin workloads exclusively to Italian proprietary DCs (IT1–IT4) with contractual residency language?
What customer audit rights, ISAE/SOC report access, and DPA signature process apply to our legal entity?
For hybrid designs, which interconnect options touch US-group clouds, and can those be excluded?

Webswing

Will Webswing provide the current ISO 27001 certificate PDF and statement of applicability scope?
Is a customer DPA available for Client Portal / support data processing, and which subprocessors apply to licensed customers?
Where is portal.webswing.org physically hosted, and are any non-EU regions used for backups?
For your Forms/Swing edge cases (WebUtil, local devices, printers), which patterns are supported without code changes?