Home › Use cases › On-premise publisher

Your customers want
the cloud. Your code
is on-premise.

You publish software that has been installed at your customers' sites for years. The model works — but renewals are stagnating, tenders demand SaaS, and a cloud competitor has just won one of your accounts. WakaStart moves you to SaaS without abandoning your existing customers.

3 modesOn-premise → cloud SaaS
0Customer abandoned
NIS2Natively compliant
from €55kMigration package
Free audit See the migration solution →
Startup — Launch your SaaS Scale-up — Rebuild your SaaS Large enterprises — Modernise your IT system On-Premise Publisher — Move to cloud SaaS

What's happening in your market

The on-premise model isn't disappearing.
It's transforming — with or without you.

The perpetual licence installed at the customer's site has proven itself for 20 years. But for the past 3 years, renewal cycles have been lengthening, tenders increasingly demand cloud SaaS, and your cloud-native competitors are gaining ground. This isn't a question of product quality — it's a question of distribution model.

What you're experiencing with the current model

Licence renewals are dragging on — customers negotiate or delay. Recurring revenue is stagnating.
Public sector and large enterprise tenders now systematically require a cloud SaaS solution with NIS2 compliance and hosting in France.
A native SaaS competitor — less feature-rich but simpler to deploy — is taking accounts you thought were locked in.
Your teams manage N installations at N customer sites, each with its own version, configuration and specific incidents. Support debt is exploding.
You can't migrate everything at once without taking an existential risk with your current customers. Inaction costs you as much as action.

What WakaStart enables you to do

Launch a cloud SaaS version of your software, NIS2-compliant and ISO 27001-ready, without rewriting all your code from scratch or putting the existing business at risk.
Maintain the on-premise version for customers who don't want to migrate — with controlled coexistence of both modes, without double development.
Offer your most sensitive customers (defence, healthcare, finance) a hybrid mode: cloud AI for design, execution and data 100% local.
Move from a perpetual licence model to predictable SaaS MRR — and present investors with a valuable recurring revenue model.
Drastically reduce support debt: a single codebase, updates with no on-site intervention, centralised monitoring.
73%of B2B tenders now require a cloud SaaS solution
×3the valuation of a SaaS publisher vs a perpetual licence publisher at equivalent revenue
-40%average support cost reduction after cloud migration (a single version to maintain)
2027NIS2 compliance deadline for B2B digital service providers

The WakaStart response

Not a forced migration.
Three modes that coexist.

Every customer has their own constraints — regulatory, contractual, cultural. WakaStart delivers an architecture that supports all three modes simultaneously. You choose the mode for each customer. The codebase, meanwhile, stays unique.

Mode 01

Shared cloud SaaS

For your new customers and those who accept cloud migration.

Shared OVH France infrastructure — shared cost, enterprise-grade quality
Total logical isolation per tenant — segregated data, zero leakage
Updates with no on-site intervention — the end of support debt
Natively NIS2 and ISO 27001-ready — respond to every tender
Startups, SMEs, local authorities
Mode 02

Dedicated cloud SaaS

For your mid-market and large enterprise customers who require physical isolation.

Dedicated OVH infrastructure — exclusive servers and cluster for the customer
Dedicated Keycloak SSO configured for the customer's private directories (AD, LDAP)
Zero technical cohabitation — physical isolation contractually guaranteed
Maintenance and updates operated by WakaStart — no internal resource required
Mid-market companies, large enterprises, subsidiaries
Mode 03

On-premise runtime

For your highly regulated customers who cannot go to the cloud.

AI design on the secure SaaS Control Plane — 100% local execution
Zero data leaves the customer's IT system — absolute digital sovereignty
Air-gap transit signed with post-quantum ML-DSA — cryptographically guaranteed integrity
Compliance with ENS Alta, NIS2, defence sector and critical healthcare (HDS)
Defence, healthcare, banking, government

Real customer case

Documalis — From an ageing architecture
to NIS2-compliant SaaS.

Verified customer case

Documalis — EDM, electronic signature and B2B invoicing

Documalis is a B2B software publisher offering an electronic document management, signature and invoicing solution. Their legacy architecture — built for speed to market — no longer met the new requirements imposed by NIS2 nor the growing compliance and traceability demands of their large enterprise customers.

ArchitectureCompletely reinvented
NIS2Natively compliant
0Customer disruption
ISO 27001Ready for certification

The challenge for Documalis was twofold: modernise an architecture that had become a commercial obstacle, and do so without disrupting their customers in production. The NIS2 directive — now fully applicable — imposed traceability, incident management and access segregation requirements that their legacy codebase could not meet without a deep rewrite. WakaStart carried out the complete cognitive reverse engineering of the solution, rebuilt the architecture on the Cybercoding framework — native multi-tenancy, compliant audit logs, secrets management via Vault, SAST/DAST pipeline — and delivered ISO 27001-ready SaaS that meets the strictest requirements of their B2B customers. The transition took place with total service continuity.

"WakaStart enabled us to completely reinvent the Documalis solution, whose ageing architecture no longer met the new requirements imposed by the NIS2 directive."

— Jordan Le Roux, Project Manager, Documalis

How it works

A progressive migration.
Every customer moves at their own pace.

Step 0 — Free audit (48 hours, free)

We analyse your existing code. You know exactly what it costs and how long it takes.

Our Lead Dev reads your on-premise codebase. Within 48 hours: technical debt mapping, identification of reusable building blocks, modular migration plan with fixed-price budget and guaranteed timeline. You sign nothing without a precise figure in hand.

Free · 48 hours · Zero commitment
Step 1 — Reverse engineering & Reconstruction

Your software is rebuilt on the Cybercoding architecture. Your current customers see nothing.

The AI analyses every functional module of your on-premise solution — even without documentation. It produces the complete specifications and regenerates your software on a cloud-native architecture: native multi-tenancy, Keycloak IAM, Vault secrets, SAST/DAST pipeline. Your on-premise version keeps running at your customers' sites throughout this phase.

On-premise version maintained · 1-to-1 testing · Zero regression
Step 2 — Migration customer by customer

Each customer migrates on their own schedule. No one is forced, no one is abandoned.

You offer the cloud SaaS version to new customers and those up for renewal. Those who don't want to migrate stay on their on-premise installation or switch to on-premise Runtime mode — same codebase, deployed locally at their site. Demanding customers (defence, healthcare, banking) benefit from the hybrid air-gap mode.

3 coexisting modes · Single codebase · No customer forced
Step 3 — New revenue model

From perpetual licence to SaaS MRR. Your company's valuation changes dimension.

Every cloud customer becomes a monthly or annual subscription. Your recurring revenue progressively replaces licence billing spikes. A SaaS publisher is valued at 5 to 10× ARR by investors — versus 1 to 2× for a licence publisher. Migration isn't just a technical decision: it's a strategic valuation decision.

SaaS MRR · Valuation ×3 to ×5 · Predictable revenue

For your most sensitive customers

The sovereign hybrid mode.
AI in the cloud, data local.

Hybrid sovereignty architecture

WakaStart SaaS

AI forge
Design

ML-DSA signature
Secure transit

DMZ / Air-Gap

Validation + local SAST/DAST
Customer infrastructure

Runtime
On-Premise

The code produced by the AI forge is cryptographically signed (post-quantum ML-DSA) before transit. On arrival, the signature is validated and the code is re-audited locally (offline SAST/DAST) before deployment. If even a single bit has been altered in transit, the package is rejected.

The contradiction resolved: AI in design, absolute sovereignty in execution.

Your defence, healthcare or banking customers cannot send their data to a third-party cloud — even a secure one. But they want to benefit from the power of AI to evolve their solution. WakaStart's hybrid sovereignty separates the design brain (our secure SaaS AI forge, hosted OVH France) from the execution muscle (the customer's local runtime). Zero data, zero authentication secret, zero line of code leaves the customer's infrastructure.

Post-quantum ML-DSA signature

Every application package is cryptographically signed. Any alteration in transit is detected and deployment is blocked.

Offline SAST/DAST on arrival

The local infrastructure independently re-scans the code, with no network connection. Supply chain integrity guaranteed.

Continuous GitOps alignment

If the local environment drifts from the validated configuration, the GitOps engine automatically corrects it. No unauthorised configuration drift.

What this changes in practice

The metrics that matter
for a publisher in transition.

×3 Valuation A SaaS publisher is valued 3 to 5× higher than a licence publisher at equivalent revenue
0 Customer lost On-premise / cloud coexistence — no customer forced to migrate
-40% Support cost A single codebase, updates with no on-site intervention
NIS2 2027 deadline Natively integrated compliance — respond to every tender starting now

The budget

A fixed price.
A changing revenue model.

Component

Cost

Cloud SaaS migration — fixed price

from €55,000 excl. VAT

ISO 27001-ready preparation option

+€10,000 excl. VAT

On-premise Runtime option (per customer)

On request

Run — OVH hosting + team

Monthly

Spread over time, no bank loan needed (36 months)

from €3,000/month

Starting from

€55,000 excl. VAT

What this budget unlocks that you didn't have before.

Access to every SaaS tender

73% of large enterprise tenders now require a cloud solution. You cannot respond to these opportunities with an on-premise solution.

Predictable MRR instead of licence spikes

Every SaaS customer generates a recurring monthly subscription. Your revenue becomes predictable, your cash flow smooths out, your valuation rises.

The end of on-site installations

No more on-site intervention to deploy, update or fix. A single codebase, a single Run team, seamless updates.

A valuation that follows

A licence publisher is valued at 1-2× revenue. A SaaS publisher is valued at 5-10× ARR. Migration isn't just a technical project.

Your questions

What on-premise publishers
ask us most often.

My on-premise customers refuse to move to the cloud. What happens to them?

They stay on on-premise Runtime mode — the same WakaStart codebase, deployed on their local infrastructure. You benefit from a single codebase to maintain for all your customers, regardless of their deployment method. Customers who refuse the cloud today can migrate to dedicated or shared mode tomorrow, with no further technical migration.

Our software has 15 years of code. How will you find your way around it?

Cognitive reverse engineering is designed precisely for this. Our AI agents analyse the source code, interfaces and flows — even without documentation, even with COBOL or VB.NET. They rebuild the real functional specifications of your software. Your team then validates that the understanding is accurate. It's an opportunity to redocument a product that no one fully understood any more.

Can we migrate module by module rather than all at once?

Yes, this is often the best approach for complex software. During the free audit, we identify the modules with the highest commercial impact (those blocking deals or generating the most support load) and start with them. The other modules follow progressively. This approach reduces risk and generates SaaS MRR from the first few weeks.

Our customers have extremely sensitive data. Is the cloud mode really secure?

WakaStart's infrastructure is 100% hosted in France (OVH), with physical and logical segregation between each tenant, AES-256 encryption at rest and in transit, and native NIS2 compliance. For customers who cannot accept the cloud even when secure, on-premise Runtime mode or hybrid air-gap mode solves the constraint without giving up the benefits of modernisation.

What is the impact on our internal technical team?

Your team takes part in the reverse engineering phase — their product knowledge is essential. After migration, they upskill in Nest.js, Kubernetes and DevSecOps practices. The time freed up by removing on-site interventions at customer sites is reinvested in product value. Support load decreases structurally with the centralisation of maintenance.

Your cloud competitor
is responding to tenders.
You will be too, soon.

Start with the free audit — our free audit of your existing codebase in 48 hours. You know exactly what it costs, how long it takes, and which customers migrate first. No commitment.

Free audit See the migration solution →
3 deployment modes Single codebase Native NIS2 ISO 27001-ready Air-Gap available FR · OVH