Compare Open Telekom Cloud and Webswing on capabilities, jurisdiction, assurance, and fit for European buyers.
Both listed as alternatives to: Amazon Web Services (AWS), Microsoft Azure
Germany· Cloud Computing
Needs review
Shortlist when you need a German Telekom/T-Systems OpenStack public cloud with DE/NL/CH regions and a strong BSI C5/ISO/TISAX package for regulated or public-sector workloads. Skip when you need hyperscaler global PaaS breadth or pure self-hosted OpenStack—consider OVHcloud, Scaleway, or AWS/Azure for those cases.
Ireland· Cloud Computing
Needs review
Shortlist when you must browser-enable an existing Java Swing/JavaFX/SWT/NetBeans or Oracle Forms estate without a rewrite and can run a self-hosted session tier. Skip when you are building a greenfield web UI only, or when the app depends on video, 3D acceleration, or ultra-low-latency graphics. Consider Citrix/VDI or a hyperscaler cloud desktop when you need generic desktop remoting beyond Java UI toolkits.
Highlighted rows differ between the two products.
| Feature | Open Telekom Cloud | Webswing |
|---|---|---|
| Country of origin | Germany | Ireland |
| Category | Cloud Computing | Cloud Computing |
| Open source | No | No |
| Self-hosted | No | Yes |
| Headquarters | Germany | Ireland |
| Legal entity | T-Systems International GmbH (Deutsche Telekom group); product marketed as T Cloud Public / Open Telekom Cloud | WEBSWING LIMITED (Webswing Ltd.), 93 Upper George's Street, Dun Laoghaire, A96 V1K8 Dublin, Ireland |
| Governing law | German / EU law for the cloud service (confirm contract) | Ireland |
| US parent / control | No known US parent | No known US parent |
| CLOUD Act exposure (indicative) | Low | Low |
| EU-hosted status | Not listed | Unknown |
| Hosting / residency | Primary: Telekom/T-Systems twin-core data centers in Germany (Biere/Magdeburg), Netherlands (Amsterdam region), and Switzerland (Bern/Zollikofen). No public indication that AWS, Azure, or GCP is the primary IaaS host. Backups/DR via platform multi-AZ services. Full public subprocessor table not found—request DPA annex. Historical Huawei technology partnership is supply-chain diligence, not US-cloud hosting. | Product runtime is customer-operated (on-prem, customer cloud, Docker, or Kubernetes). Vendor Client Portal and marketing site use listed processors including Google Ireland, Meta Ireland, LinkedIn Ireland, and The Rocket Science Group LLC (US) for email marketing; those apply to vendor website/portal data, not to self-hosted application sessions. |
| Summary | Deutsche Telekom / T-Systems sovereign European public cloud (now marketed as T Cloud Public): OpenStack-based IaaS and platform services in Germany, Netherlands, and Swiss regions with BSI C5, ISO, and SOC attestations. | Self-hosted platform that runs Java Swing, JavaFX, SWT, NetBeans, and Oracle Forms apps in the browser without rewriting them. |
| Tags |
| At a glance | Open Telekom Cloud | Webswing |
|---|---|---|
| HQ / operator | Germany — T-Systems / Deutsche Telekom | Not listed |
| Current brand | T Cloud Public (formerly Open Telekom Cloud) | Not listed |
| Platform | OpenStack-based public cloud | Not listed |
| Regions | Germany (Biere/Magdeburg), Netherlands, Switzerland | Not listed |
| Commercial model | Pay-as-you-go (+ optional discounts/reservations) | Not listed |
| Self-host | No — managed public cloud | Not listed |
| HQ | Not listed | Dublin, Ireland |
| Legal entity | Not listed | WEBSWING LIMITED (CRO 564226) |
| Founded | Not listed | 2015 (Dublin); product lineage from ~2012 |
| License model | Not listed | Commercial + SLA (evaluation available); AGPL only ≤20.2 |
| Deployment | Not listed | Self-hosted (ZIP, Docker, Kubernetes, cluster) |
| UI frameworks | Not listed | Swing, JavaFX, SWT, NetBeans, Applets, Oracle Forms |
| Key capabilities | Open Telekom Cloud | Webswing |
|---|---|---|
| EU-operated (T-Systems) | Yes | Yes |
| OpenStack public IaaS | Yes | Not listed |
| BSI C5 Type II (claimed) | Yes | Not listed |
| DE / NL / CH regions | Yes | Not listed |
| GPU + ModelArts AI | Yes | Not listed |
| Pay-as-you-go | Yes | Not listed |
| Self-hosted | Not listed | Yes |
| ISO 27001 (claimed) | Not listed | Yes |
| No-rewrite Java UI | Not listed | Yes |
| Oracle Forms capable | Not listed | Yes |
OpenStack public cloud with Elastic Cloud Server and GPUs
Self-service IaaS on OpenStack: Elastic Cloud Server flavors from general-purpose to GPU shapes for AI/ML and graphics, plus Dedicated Host and Bare Metal where the region supports them. Provision via console, API, or automation; Auto Scaling for metric-driven capacity. Suited to production VMs and hybrid patterns that need European operator control rather than a thin VPS plan.
Multi-AZ object, block, and file storage in EU regions
Object Storage Service provides S3-compatible multi-AZ object storage; Elastic Volume Service attaches block disks with snapshots; Scalable File Service offers NFS shared filesystems. Cloud Backup and Recovery and related services back up VMs and volumes into platform object storage. Pin workloads to DE, NL, or Swiss regions according to residency policy.
VPC networking, Direct Connect, and security services
Virtual Private Cloud isolation, Elastic Load Balancer, VPN, NAT, Enterprise Router, and Direct Connect for high-bandwidth hybrid links. Security stack includes Anti-DDoS, WAF, Cloud Firewall, Host Security Service, and Key Management Service with bring-your-own-key options—useful for regulated network architectures without leaving Telekom-operated regions.
Cloud Container Engine and managed data services
Cloud Container Engine runs Kubernetes-managed clusters and images; companion services cover container instances and registries. Relational Database Service supports MySQL, PostgreSQL, and Microsoft SQL with HA and backup patterns; document, cache (Redis-class), MapReduce, and search services extend the data plane. Service availability differs between DE and NL—check the regional matrix before design freezes.
ModelArts and sovereign AI positioning
ModelArts provides an end-to-end AI development path (data prep, training, deployment) on European infrastructure, with GPU-backed instances for training and inference. Aimed at teams that want model and training-data residency under the same European operator as their IaaS—confirm which AI services exist in your chosen region (several AI offerings are DE-focused).
Twin-core European data centers (DE, NL, CH)
Published regions: twin-core Germany (Biere/Magdeburg), Netherlands (Amsterdam area), and Switzerland (Bern/Zollikofen) for Swiss data residency. Vendor claims geo-redundant twin-core design, high availability targets, and renewable-powered German facilities. Not a global multi-continent footprint—by design for European sovereignty shortlists.
Browser delivery without rewriting Java UI
Runs Swing, JavaFX, SWT, NetBeans Platform, Applets, and Oracle Forms in HTML5 browsers over WebSockets with no required source changes. End users need a browser only, not a local JRE or plugin.
Customer-controlled self-hosted runtime
Install from a distribution ZIP or containers on your own servers, VMs, Docker, or Kubernetes. Standalone and Cluster Engine modes cover single-node pilots through multi-node scale-out with admin monitoring.
Incremental modernisation beside legacy screens
Modernisation Framework and JsLink let React, Angular, Vue, Vaadin, or APEX components coexist with Java UI so teams can rewrite modules over time instead of a big-bang cutover.
Enterprise auth and session operations
Pluggable security modules include SAML2, OpenID Connect, Keycloak, LDAP, and custom providers. Admin Console adds session mirror view, recording/playback, logs, and multi-tenant path isolation.
Built-in printing, files, and clipboard bridges
Browser-side printing with preview, isolated upload/download folders, and clipboard integration cover common desktop workflows that break in naive remote-app setups.
| Assurance & compliance | Open Telekom Cloud | Webswing |
|---|---|---|
| Independent security / no-logs audit | Not applicable IaaS platform—not a no-logs consumer VPN. Independent assurance is via ISO/SOC/C5-style audits rather than a no-logs report. | On request / NDA Footer states regular security testing is available upon request; no public independent audit PDF found. |
| ISO 27001 | Vendor claimed Vendor certifications page links ISO/IEC 27001 umbrella certificate PDF for download; re-verify serial/date in procurement. | Vendor claimed Site footer: Webswing Limited maintains an ISO/IEC 27001-certified ISMS. Independent cert registry entry not verified in this pass. |
| ISO/IEC 27017 (cloud security) | Vendor claimed Claimed with downloadable attestation PDF on certifications page. | Not listed |
| ISO/IEC 27018 (cloud PII) | Vendor claimed Claimed with downloadable attestation PDF on certifications page. | Not listed |
| SOC 2 / SOC 3 | Vendor claimed SOC 2 Type II (request report); SOC 3 public PDF linked on certifications page. SOC 1 Type II also claimed. | Not found No SOC 2/3 claim found on public site pages reviewed. |
| BSI C5 Type II | Vendor claimed Vendor claims BSI C5:2020 Type II (ISAE 3000); detailed report typically on request via audit-reports download flow. | Not listed |
| TISAX Level 3 | Vendor claimed Vendor states TISAX Level 3 for Germany and Netherlands regions. | Not listed |
| GDPR / EU data protection | Vendor claimed EU operator, EU/CH regions, ISO 27018/27701 claims, DPA language on marketing pages—confirm signed DPA for your entity. | Vendor claimed Privacy policy names WEBSWING LIMITED as Irish controller under GDPR; FAQ states GDPR alignment for company contact data. |
| US CLOUD Act exposure (indicative) | Partial German Telekom/T-Systems operator, no known US parent of the cloud business, primary hosting on Telekom EU/CH data centers (not AWS/GCP/Azure). Not a legal clearance of zero extraterritorial risk. Historical Huawei tech partnership is separate supply-chain diligence. Not legal advice. | Partial EU entity with no known US parent; self-hosted runtime keeps sessions on customer infra. Vendor website/portal lists US-group processor The Rocket Science Group LLC (email) plus Google/Meta/LinkedIn Ireland entities for analytics/ads. Not legal advice. |
| Data processing agreement (B2B) | Vendor claimed Vendor GDPR pages state DPA, TOMs, and audit reports available for B2B; obtain current signed pack—not fully self-serve public template verified here. | Not found Privacy policy references Art. 28 DPAs with Webswing's own processors; no public customer-facing DPA download found. Request during procurement. |
| EU AI Act | Partial Platform offers AI services (ModelArts) that may fall under customer AI Act obligations; OTC itself is infrastructure—not an automated high-risk AI system assessment by EuropeanStack. | Not applicable Core product is application delivery/runtime, not an AI system. Prague research affiliate explores AI; not the catalogued product. |
| Considerations & known limitations | Open Telekom Cloud | Webswing |
|---|---|---|
| Historical Huawei technology partnership | Medium Platform launched with Huawei hardware/software partnership; residual stack components may still matter for sensitive public-sector RFPs. T-Systems states independent operation. Review supply-chain docs under NDA. | Not listed |
| Service catalog differs by region | Medium Several services (e.g. ModelArts, bare metal, some database/analytics SKUs) are unavailable in NL or limited to DE. Design against the live regional matrix, not the full marketing list. | Not listed |
| Limited public subprocessor table | Low Unlike some SaaS vendors, a complete public subprocessor inventory was not found on marketing pages. Request DPA annex and subcontractor list before high-assurance processing. | Not listed |
| Smaller global ecosystem than AWS/Azure/GCP | Low Expect fewer regions, fewer proprietary PaaS services, and a smaller marketplace than US hyperscalers. Migration tools and partner ecosystem exist but differ in depth. | Not listed |
| Brand transition OTC → T Cloud Public | Low Documentation, console URLs, and community still mix Open Telekom Cloud and T Cloud Public names. Factor rebrand into runbooks and vendor risk registers. | Not listed |
| Higher per-session server resources | Not listed | Medium Docs state each browser session needs more server CPU/memory than a native web app. Capacity planning and Cluster Engine matter for large concurrent user counts. |
| Video, 3D, and low-latency limits | Not listed | Medium Official overview: video not supported, limited sound, no 3D hardware acceleration, poor fit for real-time action games due to rendering latency. |
| Proprietary licensing since 21.1 | Not listed | Low Current releases require commercial license + SLA. AGPL/public source stopped after 20.2. Source access for licensed customers is via Client Portal rather than a public repo. |
| Vendor portal/marketing US-group processors | Not listed | Low Privacy policy lists The Rocket Science Group LLC and major ad/analytics vendors for website/portal data. Irrelevant to on-prem session pixels, but relevant if you put sensitive personal data only into vendor portals. |
| ISO 27001 not independently verified here | Not listed | Low Vendor claims ISO/IEC 27001-certified ISMS on the site footer. Ask for the current certificate and scope before treating it as verified. |
When: You need extensive bare-metal catalogs and a very large multi-country EU footprint
Consider: OVHcloud
Different operator (France) and product packaging; compare bare-metal and region maps.
When: You prefer developer-centric European cloud packaging outside the Telekom stack
Consider: Scaleway or Exoscale
Scaleway for FR/NL-oriented developer UX; Exoscale for Swiss multi-zone IaaS + managed K8s.
When: You need global regions, marketplace depth, or proprietary PaaS only hyperscalers provide
Consider: AWS, Microsoft Azure, or Google Cloud Platform
Accept US-parent CLOUD Act exposure and multi-region complexity in exchange for breadth.
When: You want German-market hosting adjacency with a different commercial/product mix
Consider: IONOS
Often compared for German buyers; validate IaaS depth vs OTC enterprise cloud features.
When: You need generic Windows/Linux desktop remoting rather than Java UI toolkit remoting
Consider: Citrix / enterprise VDI, or Microsoft Azure Virtual Desktop
Webswing FAQ positions itself as a narrower alternative to Citrix for Forms/Java estates.
When: You are rewriting the UI entirely and have no need to keep Swing/Forms screens running
Consider: Native web frameworks (React, Angular, Vue) or Oracle APEX without a Webswing bridge
Webswing's Modernisation Framework is for coexistence during migration, not a mandatory layer for new UIs.
When: You want a hyperscaler-managed browser app streaming control plane
Consider: AWS AppStream / WorkSpaces-class services or Azure cloud desktop offerings
Trade self-hosted EU software control for managed cloud operations.