Everything You Need to Know
Quick answers to common technical and billing questions about Thalaxo Cloud.
What is a “Stack” in Thalaxo Cloud?
A Stack represents a complete, logical environment (e.g., Production, Staging). It groups compute, storage, and networking resources across providers for unified lifecycle management and billing.
Does Thalaxo Cloud need admin access to my Cloud?
No. We operate on strict Read-Only access via Cross-Account Roles/OIDC for discovery and FinOps. Write permissions are only required if you explicitly opt in to automated provisioning or Drift Auto-Fix on the Pro tier — always after explicit activation, with a full audit trail.
What happens if my “Cloud Spend” exceeds my plan?
No panic. Thalaxo Cloud applies a 20% tolerance. In case of major overage, a 7-day grace period activates. If you don’t upgrade, your account enters Soft Lock: your data is 100% secure, but export and advanced monitoring features are temporarily suspended.
Does Drift Detection work with all resources?
Drift detection covers all compute, networking, and storage components supported by our Terraform provider mappings across AWS, Azure, and GCP.
Can I really save 70% with the Growth plan?
Yes. The up to 70% savings comes from unlocking our automated Spot Pricing engine, which surfaces Spot Pricing recommendations for fault-tolerant workloads — applied only when you approve the change (like batch processing or non-prod environments) to spot instances without sacrificing availability.
How does onboarding work?
It takes 5 minutes. Connect your cloud accounts via API. Our agentless engine automatically crawls your VPCs and imports your existing infrastructure state without requiring you to rewrite any code.
What if we already use native cloud consoles and tools?
Thalaxo Cloud detects configuration drift (it does not write changes back automatically). If a developer makes a manual change in the AWS console, Thalaxo Cloud detects the drift and logs it, ensuring your central dashboard is always the true source of truth.
Is Thalaxo Cloud SOC 2 compliant?
We are fully GDPR compliant and build our architecture on strict security principles (least privilege, encryption at rest/transit). Official SOC 2 Type II and ISO 27001 certifications are currently on our transparent roadmap for 2026.
Can I export my infrastructure if I decide to leave?
Yes. We guarantee zero vendor lock-in. You can export your Stacks as native Terraform code at any time and take full control of your infrastructure independently.
What IAM permissions does Thalaxo require?
New connections start read-only (Describe*, GetMetric*, List*). Write permissions are only requested if you explicitly upgrade a credential to Scheduler, Builder, or Autopilot — always via provider-enforced IAM roles you control.
Where is customer data stored?
Thalaxo application data is hosted in the EU on AWS (Paris region, eu-west-3). Cloud provider credentials are encrypted and not stored in plaintext; disconnecting a provider triggers purge on our side plus teardown instructions for your IAM bindings.
What metrics does Thalaxo collect?
We collect inventory metadata, cost signals, and performance metrics needed for FinOps recommendations (CPU, memory, disk, network where available). We do not exfiltrate application payloads or customer business data from your cloud accounts.
How do I revoke Thalaxo access?
Disconnect the provider credential in Thalaxo (one click). We purge Thalaxo-side secrets immediately and show step-by-step instructions to remove the IAM role, Azure assignment, or GCP binding on your side.
What happens when I enable automation?
Automation (Auto-fix, Auto-apply, scheduling actions) is optional, tier-gated, and always requires explicit activation per credential. Every automated action is audited; nothing runs autonomously without your configuration.
Still have questions?
Talk to an engineer who can answer technical questions about your specific infrastructure needs.
Talk to an Engineer