Understand your cloud spend and identify your next savings.

FinOps Move2Cloud is an application offered and operated by Move2Cloud. Control of access, the partitioning of organisations and the encryption of credentials are part of its design.

To know the exact scope of the hosting, the backups and the external processing, contact Move2Cloud. These three elements must be told apart to assess where the data is located.

Yes. A single connection can cover a whole AWS organization, all the subscriptions of an Azure management group, all the projects of a Google Cloud billing account or of a Scaleway organisation. The filters let you choose a provider, then an AWS account, an Azure subscription, an OVHcloud, Google Cloud or Scaleway project, or a Scalingo app.

Yes. FinOps Move2Cloud tracks the spend of your Azure subscriptions: costs by service and by region, twelve-month history, end-of-month forecast and budgets. The connection is made with no secret to hand to us: you authorise our application in your directory, then give it a role limited to reading costs. Savings recommendations specific to Azure will come next.

Yes. For Google Cloud, the costs are read from the export of your billing to BigQuery, with a service account limited to reading: costs by project, service and region, twelve-month history since the export was turned on. For Scaleway, an API key limited to reading the billing is enough: costs by project and by resource type, twelve-month history.

In both cases, the end-of-month forecast extends the spend at its current pace, as the provider publishes no forecast. Budgets, alerts and dashboards apply as for the other providers; savings recommendations specific to these two providers will come next.

To track your cloud costs in one place and to reduce them: month's spend, end-of-month forecast, history, budgets with alerts and priced savings recommendations.

• OVHcloud Public Cloud
• Scalingo
• AWS
• Azure
• Google Cloud
• Scaleway

No. The 14-day trial requires no bank card, no IBAN and no connection to a bank account. You create a user account to find your data and your dashboards again.

No. The demonstration data lets you discover the screens before connecting your own accounts. To analyse your real spend, you then add read-only cloud access.

Yes. On the overview of an account with no provider, “Try with demonstration data” loads fictional projects and apps. They are replaced by your real data at the first synchronisation of a connected account.

You describe the view you want, in English or in French: a provider, projects or apps, an environment and the useful indicators. When the AI is enabled on the platform, it proposes the blocks and the scope. You check the draft, change it and save it.

Creation from templates and manual configuration remain available. If AI composition fails or is not enabled, a rule-based composition takes over.

The priced recommendations rely on rules analysing the costs, the inventory and the metrics available at each provider, as well as on the provider's own advice. They detect in particular oversizing, unused resources and commitment opportunities.

When the AI is enabled on the platform, it also reads what you are billed, service by service, and adds a summary, the recommendations to start with and leads that the rules do not cover. These leads are marked as such and do not count in the savings totals: the amounts shown remain those read at your providers. The AI makes no decision about your resources.

For the cost analysis: your costs by project, service and region, the billing detail, the recommendations, the practices observed and the budgets. Account numbers and the identity of the owners of the connected accounts are never transmitted: an AWS account is referred to by its rank, and account numbers, e-mail addresses, and the names of the organisation, of its accounts and of its team are removed from the texts. No access credential is transmitted.

For the composition of a dashboard: your request and a summary of the scope; the names of the projects and apps only if you allow it. AI processing uses an external provider: where it processes data must not be confused with where the application's database is hosted.

The cloud credentials saved are encrypted with AES-256-GCM. On AWS, the connection can use a read-only role, without handing over an access key. Your access to the console can be protected by two-factor authentication.

Read permissions only:

• OVHcloud: a token limited to reading Public Cloud projects (GET /cloud/project and its sub-paths).
• Scalingo: an API token. Scalingo does not offer a read-only token; the tool only reads.
• Scaleway: an API key of an IAM application that only has the BillingReadOnly and ProjectReadOnly permission sets.
• AWS: a read-only role created by a ready-to-launch CloudFormation stack (costs, and optionally the inventory and AWS's recommendations), with no key to hand to us. Failing that, an IAM user limited to ce:GetCostAndUsage and ce:GetCostForecast.
• Azure: the FinOps Move2Cloud application, which you authorise in your Microsoft Entra ID directory, then to which you give the Cost Management Reader role on a management group or on the subscriptions to track, with no secret to hand to us. Failing that, your own application with a client secret. No Contributor or Owner role is needed. Depending on your Azure contract, access to costs may also depend on billing permissions.
• Google Cloud: a service account with the BigQuery Data Viewer role on the billing export's dataset and the BigQuery Job User role on its project. The tool only runs read queries on that export.

No. It only reads: costs, forecasts and inventory. The recommendations are advice, for you to apply yourself at the provider.

No. They are estimates based on the prices and the information available. Check the availability constraints and the dependencies before any action. The console never deletes or resizes your resources automatically.

By the cloud spend the tool tracks for you: the average of your last three closed months, all providers combined. Discovery covers up to €1,000 per month, Pro up to €10,000, Enterprise up to €40,000; beyond that, the offer is made on quotation. Exceeding your bracket blocks nothing: you are told in the console, and the change of plan is made by mutual agreement.

Yes. The analyses have CSV and PDF exports. The recommendations can be exported by provider, with the optimisation practices by project and app: environment, running of instances, autoscaling and sizing when this data is available.

From the Overview, you create a link to a copy of the figures of the chosen scope. Anyone with the link can view it read-only. The link expires after 24 hours and can be disabled before it expires.

You set your budgets and the alert recipients. The notifications cover thresholds reached, overruns forecast and overruns observed. Their sending depends on the configuration of the platform's e-mail service.

Once a day automatically, by default: the owner and the administrators of the organisation set this frequency (from every 6 hours to once a week) or turn off the automatic reading in Organisation settings → Synchronisations. And on demand, with the “Synchronise” button at the top of the pages, up to 10 times per 24 hours. Its arrow lets you read a single provider. Each reading appears in the log on that same page.

With the Pro (2 members, owner included) and Enterprise plans, in Organisation settings → Team: one invitation per e-mail address, with a role. The link is valid for 7 days; it can be resent or cancelled. A person who already uses the tool in another organisation accepts the invitation with their existing access, without a new password.