# Sakura Sky: Cloud, Data, Security

> Sakura Sky engineers the cloud platforms, data foundations, and security that organisations run on, and the same engineers operate what they build.

This is the `llms.txt` index for https://www.sakurasky.com/: a plain-text map of the site's main content for LLM crawlers and AI search products. See https://llmstxt.org for the format.

Last updated: 2026-10-27

## About

Sakura Sky engineers the cloud platforms, data foundations, and security that organisations run on, and the same engineers operate what they build.

- Website: https://www.sakurasky.com/
- Organization: Sakura Sky
- Founded: 2011
- Contact: hello@sakurasky.com
- [Who We Are](https://www.sakurasky.com/who-we-are/): We have engineered cloud, data, and security platforms since 2011, for startups through to large enterprises in regulated industries.
- [Partners](https://www.sakurasky.com/partners/): We partner with the cloud and security providers our clients rely on most. Each one was chosen for what it lets us deliver, and each gives our engineers deeper …
- [Our Customers](https://www.sakurasky.com/our-customers/): Sakura Sky engineers cloud, data, and security platforms for clients in regulated finance, the public sector, media, sport, and industry.

## How the site is organised

- Capabilities are our three practices: Cloud, Data & AI, and Security. Each page lists its core services, what we deliver, and how each part is designed, built, managed, and governed.
- Solutions are frameworks and programmes built on those practices: Accelerate, Enclave, Sentinel, and Praxis.
- Services are the ways to work with us: Professional Services (design and build), Managed Services (run), and Managed GRC Services (governance, risk, and compliance).
- Case studies show past client work. Insights (blog, white papers, and podcasts) is our published writing.

## Capabilities

- [Cloud](https://www.sakurasky.com/cloud/): Cloud platforms on AWS, Google Cloud, and Azure that stay up under load and inside budget: architecture, migration, landing zones in code, and cost control.
- [Data & AI](https://www.sakurasky.com/data/): Data platforms your team can run, trust, and explain to a regulator: pipelines, governance, lineage, and reporting, with AI built on that foundation.
- [Security](https://www.sakurasky.com/security/): Security that starts with your data: data protection, identity for people, services, and agents, a hardened cloud baseline, detection, and AI guardrails.

## Solutions

- [Accelerate](https://www.sakurasky.com/accelerate/): Focused sprints that deliver production-ready cloud, data, or security solutions, jointly built in your environment with senior engineering depth.
- [Enclave](https://www.sakurasky.com/enclave/): Building secure, multi-project cloud organisations with governance and policy enforced at the core, driven by Infrastructure as Code from day one.
- [Sentinel](https://www.sakurasky.com/sentinel/): Governing data and AI security across agentic systems, with runtime monitoring, policy-as-code, drift detection, and verifiable audit trails.
- [Praxis](https://www.sakurasky.com/praxis/): Engineering compliance as running controls and continuous evidence, across regimes such as GDPR, the EU AI Act, the EU Data Act, and MiCA. The productised core of our Managed GRC Services.

## Services

- [Professional Services](https://www.sakurasky.com/professional-services/): Senior cloud, data, and security engineers embedded in your platform work to design, build, and hand over modern enterprise systems your team can run.
- [Managed Services](https://www.sakurasky.com/managed-services/): Running CloudOps, DataOps, MLOps, and security operations as a managed service across cloud, data, and AI platforms, open source and commercial alike. SLAs, observability, continuous improvement.
- [Managed GRC Services](https://www.sakurasky.com/grc/): Managed governance, risk and compliance operated as running controls and continuous evidence, engineered by the team that builds your cloud, data, and security. We cover the regulatory frame you …

## Case studies

- [Migrating a Live Real-Time Communications Platform from AWS to Google Cloud](https://www.sakurasky.com/case-studies/11sight-gcp-migration/) (11Sight): Sakura Sky migrated 11Sight's real-time voice and video platform from AWS to Google Cloud using a compute-first hybrid strategy, with under five minutes of user-facing downtime and zero data loss.
- [Immersive Simulation on Google Cloud](https://www.sakurasky.com/case-studies/orbx-gke-bigtable/) (Orbx): Orbx unified its fractured multi-cloud environment into a 100% cloud-native architecture, achieving a 400% increase in release velocity.
- [Innovation at Speed: How Xapo Bank Achieved 85% GenAI Adoption](https://www.sakurasky.com/case-studies/innovation-at-speed-how-xapo-bank-achieved-genai-adoption-in-just-8-weeks/) (Xapo Bank): Xapo Bank hit 85% GenAI adoption in 8 weeks by turning to Google Gemini and frictionless governance.
- [An API Governance Framework for SkillsFuture Singapore's API Platform](https://www.sakurasky.com/case-studies/ssg-api-governance/) (SkillsFuture Singapore (Sakura Sky as subcontractor)): As a specialist subcontractor on SkillsFuture Singapore's API platform programme, Sakura Sky wrote the API governance framework: lifecycle stage gates, design guidelines, risk-based access, and …
- [Enabling Player Data for the National Rugby League](https://www.sakurasky.com/case-studies/nrl-game-analytics-data-platform/) (National Rugby League (NRL)): Sakura Sky built a Google Cloud data platform for the National Rugby League that brings player statistics, data, and dashboards together for the league and for each club.
- [Helping Cobalt Move from Heroku to Kubernetes on Google Cloud](https://www.sakurasky.com/case-studies/cobalt-heroku-gcp-migration/) (Cobalt): Sakura Sky and Google ran a three-day workshop series with Cobalt's engineers in Berlin to help Cobalt move its platform from Heroku to Kubernetes on Google Cloud.
- [A Data Engineering Environment for Distributed Research Teams at Tessa Therapeutics](https://www.sakurasky.com/case-studies/tessa-therapeutics-research-data-platform/) (Tessa Therapeutics): Sakura Sky built a full data engineering environment on Google Cloud for Tessa Therapeutics, then a Singapore cancer cell therapy company, giving its distributed research teams one place to run pharma …
- [Starting the San Francisco Giants' Move to Google Cloud](https://www.sakurasky.com/case-studies/sf-giants-sports-data-platform/) (San Francisco Giants): Sakura Sky ran an eight-day Accelerate programme with the San Francisco Giants to start moving their baseball data system, built in the early 2000s, to Google Cloud.
- [Scaling Data Engineering: A Google Cloud Platform Case Study for Craveable Brands](https://www.sakurasky.com/case-studies/our-work-with-craveable-brands-featured-as-a-google-cloud-platform-case-study/) (Craveable Brands): Sakura Sky designed and built the Google Cloud Platform data engineering platform for Craveable Brands, unifying operations across 570+ quick-service restaurants and reducing data costs by 75%.
- [Bringing Underground Camera Feeds to the Browser for APC Global Systems](https://www.sakurasky.com/case-studies/apc-global-ip-cameras/) (APC Global Systems): Working from Sydney, Sakura Sky built a remote security and monitoring application, delivered over the web, for APC Global Systems' rugged IP cameras at an underground copper operation in Zambia, on …

## White papers

- [The CTO Playbook for Agentic Systems](https://www.sakurasky.com/white-papers/cto-playbook-for-agentic-systems/): A leadership, architecture, and organisational blueprint for AI-native companies: what changes when software reasons, decides, and writes the software that …
- [The Managed Provider Scorecard: Supplier Assurance Under NIS2 and the UK Cyber Security and Resilience Bill](https://www.sakurasky.com/white-papers/managed-provider-scorecard/): A seven-question scorecard for evaluating managed service providers against NIS2 and the UK Cyber Security and Resilience Bill, with side-by-side reporting …
- [The Autonomous Horizon](https://www.sakurasky.com/white-papers/autonomous-horizon/): A strategic white paper for executive teams. The operating model, the architecture, and the leadership decisions that will define the next decade of autonomous …
- [Signal-to-Noise: A Checklist for Evaluating AI Security Tools](https://www.sakurasky.com/white-papers/signal-to-noise-checklist/): A 24-question evaluation framework for security teams procuring AI-driven discovery and remediation tooling. Built around the four-stage funnel from finding to …
- [GATE: The Governed Agent Trust Environment](https://www.sakurasky.com/white-papers/gate/): An open framework defining 20 controls across four layers for governing AI agents in production. The deterministic perimeter that wraps the probabilistic model …
- [The Trustworthy Agentic AI Blueprint](https://www.sakurasky.com/white-papers/trustworthy-agentic-ai-blueprint/): A comprehensive architectural blueprint defining the 16 missing primitives required to move from experimental AI to scalable, production-ready enterprise …
- [The Executive AI Playbook](https://www.sakurasky.com/white-papers/ai-playbook/): A practical leadership framework for governing AI, aligning it to business outcomes, and moving from isolated pilots to durable enterprise impact. Updated June …

## Podcasts

- [Podcasts](https://www.sakurasky.com/podcasts/): Conversations with engineers and practitioners about cloud, data, security, and AI.

## Blog

The full blog index (233 articles) is at https://www.sakurasky.com/blog/, and every page is listed in https://www.sakurasky.com/sitemap.xml.

### Recent posts

- [Before You Scale the AI, Fix the Evaluation](https://www.sakurasky.com/blog/before-you-scale-the-ai-fix-the-evaluation/), 2026-10-27: Once an AI system makes measurable decisions in production, evaluation decides whether you can trust it. Five learning outcomes on metrics, operating points, …
- [Whose Authority Reaches the Tools?](https://www.sakurasky.com/blog/agent-security-in-practice-part-3/), 2026-10-26: Deciding, server by server, whether an ADK agent on Agent Runtime calls its MCP tools as the employee or as itself: on-behalf-of tokens for one query, email …
- [From a Leaked Pipeline Credential to Bulk Data](https://www.sakurasky.com/blog/pipeline-attack-surface-leaked-service-account-key-part-1/), 2026-10-22: A service account key made before your org blocked key creation still works. How one legacy dbt key reaches BigQuery, and the inventory that finds keys like it.
- [What Your Agents Inherit From Your Data Engineering](https://www.sakurasky.com/blog/what-your-agents-inherit-from-your-data-engineering/), 2026-10-21: An agent can only explain what your data platform can explain. How business rules, their history, and corrections are engineered from the lakehouse up decides …
- [From an Entra Sign-In to an Agent Session](https://www.sakurasky.com/blog/agent-security-in-practice-part-2/), 2026-10-19: How an employee's Microsoft Entra sign-in reaches an ADK agent on Agent Runtime: the token checks, the session binding, who else can call the agent, step-up for …
- [Native Tables, Managed Iceberg, or Iceberg in an Open Catalog](https://www.sakurasky.com/blog/lakehouse-bigquery-native-vs-iceberg-tables-part-2/), 2026-10-16: Choosing storage for a BigQuery lakehouse layer by layer: what native tables, managed Iceberg, and Iceberg in an open catalog each give up, who maintains the …
- [Mapping the Agent Before Anyone Attacks It](https://www.sakurasky.com/blog/agent-security-in-practice-part-1/), 2026-10-14: A reference operations agent on Google Cloud, threat-modelled against OWASP and MITRE ATLAS, with a first control: a deny-by-default policy check on its tool …
- [Keeping Raw Data You May Be Asked to Delete](https://www.sakurasky.com/blog/lakehouse-bronze-data-erasure-part-1/), 2026-10-13: Erasure in a BigQuery medallion lakehouse: keep emails out of bronze, delete in two stages, and compute when erased copies leave the pipeline's storage.
- [Sakura Sky and UpCloud: A European Cloud Partnership](https://www.sakurasky.com/blog/upcloud-partnership/), 2026-10-12: Sakura Sky is now an UpCloud partner. Here is what European sovereign cloud on UpCloud brings our customers, and the services we are launching with it.
- [Multi-Cloud Retail Without the Mess](https://www.sakurasky.com/blog/qsr-retail-engineering-part-3/), 2026-10-09: Many QSR and retail estates run identity in Microsoft Entra ID, back-office systems on SQL Server in Azure, the data platform on Google Cloud, and loyalty on …
- [Thousands of Sites, One Pipeline](https://www.sakurasky.com/blog/qsr-retail-engineering-part-2/), 2026-10-08: Why operations and analytics report different sales for the same store-day, and how a medallion pipeline brings a multi-site network to one agreed set of …
- [The Loyalty Backend Is a Data Engineering Problem](https://www.sakurasky.com/blog/qsr-retail-engineering-part-1/), 2026-10-07: Loyalty points are a balance-sheet liability as well as a marketing tool. Following one point through enrolment, earning, accrual, redemption, expiry, and …
- [Patient Data Across Boundaries](https://www.sakurasky.com/blog/pharma-healthcare-engineering-part-3/), 2026-10-06: Which privacy rules govern a multi-country trial's data depends on where each participant enrolled, what they agreed to, and who holds each copy. A set of …
- [Your Lab Notebook Is a Data Product](https://www.sakurasky.com/blog/pharma-healthcare-engineering-part-2/), 2026-10-05: When a licensing partner's diligence team asks for the data behind a preclinical programme, many research organisations find the evidence spread across …
- [Chain of Custody for Trial Data](https://www.sakurasky.com/blog/pharma-healthcare-engineering-part-1/), 2026-10-02: One revised LDL-C result shows where custody of clinical trial data breaks: at the handovers between laboratory, CRO, and sponsor. What 21 CFR Part 11, ICH …
- [Legacy Modernisation That Meets the Audit Bar](https://www.sakurasky.com/blog/government-engineering-part-3/), 2026-10-01: A modernised government system can work perfectly and still leave its auditors short of evidence, because the history the old system kept was lost in the move. …
- [API Governance Done Properly](https://www.sakurasky.com/blog/government-engineering-part-2/), 2026-09-30: Follow one eligibility API through a public sector programme twice: first governed by a review board and a spreadsheet, then by the platform it runs on. Well …
- [Sovereign Cloud Is an Architecture, Not a Procurement](https://www.sakurasky.com/blog/government-engineering-part-1/), 2026-09-29: A sovereign cloud contract usually covers the platform, while keys, identity, data rules, telemetry, and testable contract terms decide whether sovereignty …
- [Audience Telemetry as a Strategic Asset](https://www.sakurasky.com/blog/media-engineering-part-3/), 2026-09-28: Most broadcasters and streamers already collect real-time audience signals, but on the streaming side those signals are usually split between the player, the ad …
- [The CTO Playbook for Agentic Systems](https://www.sakurasky.com/blog/cto-playbook-for-agentic-systems/), 2026-09-18: A 71-page operating manual for engineering leaders whose software has started to reason, decide, and write the software that carries out those decisions. …

### Browse by category

- [Engineering](https://www.sakurasky.com/categories/engineering/): 54 articles
- [News](https://www.sakurasky.com/categories/news/): 72 articles
- [Opinion](https://www.sakurasky.com/categories/opinion/): 104 articles
- [Solutions](https://www.sakurasky.com/categories/solutions/): 3 articles

## Crawling guidance

- All public content under https://www.sakurasky.com/ is allowed for AI crawling, training, and citation. See `/robots.txt`.
- Citations: please cite the canonical URL in each page's `<link rel="canonical">`.
- Publish date, last-modified date, author, and categories are in each article's JSON-LD `Article` block.
- Sitemap: https://www.sakurasky.com/sitemap.xml
- RSS: https://www.sakurasky.com/index.xml