What is the WZ-IT Section 203 Managed Cloud?

It is an isolated operating environment for applications used by professional secrecy holders. WZ-IT combines German infrastructure providers, a continuous chain of Section 203 addenda, platform operations, deployments and the individually agreed ongoing service scope.

What is the difference between managed and co-managed?

In the managed model, WZ-IT takes over the agreed application, platform and infrastructure tasks. In the co-managed model, your team continues developing the software while WZ-IT operates the infrastructure, platform, deployments, monitoring and backups within the defined scope.

How do development and deployments work in the co-managed model?

Your team can continue using its familiar AI coding tools and push changes to a Git repository. WZ-IT operates the deployment path. Depending on the agreed model, changes are deployed automatically to staging and promoted to the separate production environment after testing or approval; direct deployments and defined rollbacks are also possible.

Can WZ-IT operate vibe-coded software?

Yes, provided that the application can be technically assessed and moved into a reliable production architecture. Typical topics include repository and dependencies, authentication, secrets, database, storage, deployment, monitoring, backup and a controlled update path.

Can Supabase, Coolify and open-source applications be part of the environment?

Yes. Supabase can be operated as the backend, Coolify as the PaaS and deployment layer, and software from the WZ-IT open-source catalogue as the application. Edition, licence, integrations, data paths and responsibility boundaries are reviewed before the proposal.

Are German providers used exclusively and are third-country transfers avoided?

Yes. WZ-IT uses German infrastructure providers exclusively for this service. No data transfer to third countries is planned within the agreed operating scope. All participating service providers are integrated through a continuous chain of Section 203 addenda.

Is every environment automatically compliant with Section 203?

No. A blanket statement without knowing the actual use would not be reliable. WZ-IT designs architecture, access, processes and contractual requirements around the specific project. Legal assessment of the use remains with the responsible customer and its advisers.

Can an existing environment be taken over?

Yes. WZ-IT reviews existing installations, documentation, access, update paths, backups and dependencies. Combined starting points such as Vercel with Supabase Cloud can also be migrated into a private target environment operated professionally in Germany.

What does the Section 203 Managed Cloud cost?

Ongoing operations start from €499.90 excluding VAT per month. The final monthly price and one-time services follow the individual proposal after the non-binding enquiry.

Which data should we include in the initial enquiry?

Only technical outline information such as application type, user count, approximate volume, current platform and desired outcome. Please do not submit credentials or client, patient or other confidential content data.

Section 203 Managed Cloud for professional secrecy holders

WZ-IT operates customer-owned business applications, AI-developed software and open-source applications for professional secrecy holders - fully managed or co-managed with your development team. We operate the isolated infrastructure, platforms such as Supabase and Coolify, deployments and the agreed ongoing service scope.

Isolated operating environment
German providers only
No third-country transfer
Continuous Section 203 contract chain

Request a non-binding assessment Scope it in the configurator

Reviews

IT Beratung Service Consulting Soforthilfe

Companies worldwide trust WZ-IT

Read client reviews

Typical starting points

Migration paths into the Section 203 Managed Cloud

The target architecture follows the services actually in use. These three paths cover common starting points.

Vercel and Supabase Cloud
Frontend, functions, domains, database, auth and storage are captured and moved to Coolify, self-hosted Supabase or suitable individual components in the German target environment.
App builder or Git repository
Lovable, Bolt, Replit or custom code is assessed technically and operated through a defined build, staging and deployment path on Coolify or another suitable target platform.
Existing open-source or business application
Application, data, integrations and existing infrastructure are taken over or migrated and then operated fully managed or together with your team.

Service structure

Which systems you can have operated

WZ-IT can take over operations completely or share responsibility with your development and IT team.

Custom and vibe-coded applications

Assess Lovable, Bolt, Replit or custom-built applications and move them into a maintainable production environment.

View application operations

Supabase as a managed backend

Migrate, deploy and operate PostgreSQL, Auth, Storage, Realtime and Functions within the agreed scope.

View Supabase for Section 203

Coolify as a PaaS and deployment layer

Provide Git-based deployments, environments, domains and platform operations for collaboration with your development team.

View Managed Coolify

Operate open-source applications

Install, migrate, integrate and operate applications from the WZ-IT catalogue with monitoring, backups and updates.

View the open-source service

Operating model

Fully managed or co-managed

Both models use the same Section 203 operating environment. The proposal defines responsibility for application, platform, deployment and infrastructure.

Co-managed

Your team continues using its familiar AI coding tools
Changes are pushed to the agreed Git repository
WZ-IT operates the build, staging and deployment path
Approval, production and rollback are defined per application

Managed operations

WZ-IT takes over the agreed application and platform operations
Updates and deployments follow an agreed process
Monitoring, backups and recovery are clearly scoped
Further development can be added as a separate work package

Managed operations

Service areas within Section 203 operations

The actual scope is based on the application, the required division of work and the operating requirements.

WZ-IT Section 203 Managed Cloud

Isolated infrastructure
Provide compute, storage and networking in a separate operating environment using German providers only. No third-country transfer takes place within the agreed operating scope.
Section 203 contract chain
All service providers participating in the operating scope are integrated through a continuous chain of Section 203 addenda.
Migration into your own target environment
Capture applications from Vercel, Supabase Cloud, app builders or other services as a complete system and move them into the German target environment.
Supabase, Coolify and open source
Deploy, integrate and operate backend, PaaS, deployment and application components to match the system.
Deployments and co-management
Build Git pushes automatically and deploy them to staging first or directly, depending on the model. Separate staging and production environments, approvals, secrets and rollback are configured around the application.
Ongoing operations and recovery
Define monitoring, updates, response, backups, retention and recovery for the agreed system scope.

Approach

Lifecycle from assessment to ongoing operations

Migration, Section 203 addenda, operations and further development are planned as one connected process.

01
Assess and classify
Capture application, code, users, data types, repository, Vercel, Supabase and other dependencies. If required, the engagement starts with an AI Code or Production Readiness Audit.
02
Define target and migration path
Define the German target environment, Supabase, Coolify and open-source components, data paths and responsibilities in the managed or co-managed model.
03
Contract chain, migration and go-live
Establish Section 203 addenda with all participating service providers, build the environment, migrate and test data and application, and perform a controlled cutover.
04
Operate and evolve
Take over monitoring, updates, backups, recovery and deployments. Your team can continue development in the co-managed model, and WZ-IT can add code maintenance and further development.

This information is sufficient for the first step

Application type, purpose and technical status
Approximate number of users and data volume
Repository, current platform or existing prototype
Database, auth, storage, Supabase or Coolify components in use
Required division between development and operations
Credentials, exports or confidential content are not required for the initial enquiry.

Target groups

For professional secrecy holders using custom software and open source

The service is designed for organisations that want to outsource application operations completely or share responsibility with WZ-IT.

Law firms and notaries
Client portals, knowledge systems, custom applications and open-source software with defined data, access and operating paths.
Tax advisers and auditors
Business applications, automation, Supabase and internal platforms with documented operations, role models and recovery paths.
Healthcare and psychotherapy
Applications and AI workloads for highly confidential information with a defined operating location, access model and service-provider chain.
Internal development and IT teams
Co-managed operations: your team continues development while WZ-IT operates the agreed infrastructure, platform and deployment path.

Section 203 Managed Cloud

Ongoing operations based on an individual proposal

Starting price for ongoing operations. You receive the final scope and price after your non-binding enquiry.

Ongoing operationsfrom €499.90 excl. VAT / month

Request a non-binding assessment Scope it in the configurator

Open the professional secrecy knowledge cluster

Explore principles, assessment criteria and operating paths for Section 203, Supabase, open source and AI-generated software in the knowledge cluster.

Frequently asked questions about the Section 203 Managed Cloud

Operating models, applications, infrastructure and contractual integration

Related services

Application, platform and operations

Related services for code assessment, co-development, open source and Supabase migration.

AI Code & Production Readiness Audit

Have AI-generated or inherited code assessed systematically before migration and production operations.

View service

Software maintenance and ongoing support

Maintain code, dependencies, security advisories, technical fixes and releases after go-live or takeover.

View service

Managed Open Source

Have applications from the WZ-IT catalogue configured, integrated and continuously operated.

View service

Supabase migration

Move Supabase Cloud, Auth, Storage and Functions into your own target environment in a controlled process.

View service

Reviews & projects

Client feedback and projects worldwide

WZ-IT moved our studio infrastructure from decentralised individual devices to a central platform: every site is securely connected via VPN, new devices are onboarded automatically and an entire site is provisioned from a template, without manual steps on location. What impressed me most is the breadth and depth of their knowledge: Timo and Robin are not a typical IT provider who sets up a server and leaves. The two of them think their way into highly complex infrastructure and software topics, work through every requirement we put in front of them, and build networking, provisioning and operations so that everything fits together in the end. WZ-IT is an excellent partner for complex software, network and architecture projects.

Steve KirchnerManaging Director, nextGYM GmbH

View project

International

Built in Germany's Ruhr Valley. Running worldwide.

WZ-IT designs, develops and operates infrastructure and software for clients in Germany and internationally. We deliver projects remotely and continue supporting them in ongoing operations after go-live.