AWS Pilot Live EU-First Open-Source Engine Approval-Based Automation

European cloud infrastructure needs a dedicated governance layer. We are building it.

GreenPilot AI is building the tooling layer that lets European SMEs run AWS infrastructure that is financially efficient, environmentally accountable, legally compliant, and under their own control — without an enterprise-scale team to manage it.

“Most cloud tools tell you what is wrong. None of them are built for the regulatory, environmental, and sovereignty constraints that define how European companies must operate their infrastructure.” — The gap GreenPilot AI is built to close.

Five regulatory and market forces converging at the same time.

Each one alone would create demand. Together they define a structural shift in how European companies must think about cloud infrastructure — and who they trust to help them manage it.

Enforced 2024

NIS2 Directive

EU-wide cybersecurity obligations now apply to a significantly broader set of companies. Cloud configuration, access controls, and incident response are no longer optional governance topics for mid-market firms.

In Force 2025

EU AI Act

General-purpose AI model providers must document energy consumption. Operational AI governance is becoming a compliance requirement, not a best practice. The tooling to measure and report it does not yet exist at SME scale.

Direction Set

CSRD Emissions Reporting

Cloud infrastructure is in scope for Scope 2 and Scope 3 emissions disclosures. Most SMEs have no process for estimating cloud carbon, let alone reporting it. GreenPilot's methodology is already built for this gap.

Advancing 2025+

EU Cloud Sovereignty

The European Commission's EUCS scheme, GAIA-X, and the Data Act are converging on a single question: do European companies actually control where their data and workloads live? GreenPilot makes that question answerable from the AWS configuration itself.

Structural Gap

No SME-Scale Tooling

Enterprise FinOps platforms require dedicated teams to operate. Native AWS tools surface problems without helping you act on them safely. European SMEs — 99% of all EU businesses — have no purpose-built solution for cost, carbon, and governance in one place.

Market Signal

Cloud Waste at Scale

Flexera's 2024 State of the Cloud report puts average cloud waste at 28% of total spend. For a European SME spending €10,000/month on AWS, that is €33,600 per year in recoverable cost — before any governance or carbon benefit is counted.

Five pillars. One connected system.

These are not five separate features. They are five dimensions of the same problem: European companies need cloud infrastructure they can understand, control, and account for. GreenPilot makes that practical without an enterprise-scale team.

01 / 05

Innovation

GreenPilot is not a dashboard that surfaces recommendations and leaves execution to you. It is an automated assessment engine with open-source, inspectable logic — rule-based today, ML-scoring on the roadmap. The methodology is public, testable, and verifiable by anyone who checks the repository. In a market full of black-box SaaS tools, that is a structural trust advantage.

Proof: 56 tests, public GitHub repository, least-privilege IAM policy with structural test coverage, botocore Stubber-based AWS collector tests. No claims that cannot be verified.
02 / 05

Approval-Based Automation

Every competitor either gives you a report and leaves you to act manually, or automates changes without asking. GreenPilot sits in the only defensible position: automated detection, human-controlled execution. Every optimization requires explicit sign-off before it runs. This is the right model for SMEs who cannot afford production mistakes and do not have a team to supervise autonomous changes.

Proof: Five-stage workflow (Connect, Scan, Report, Review & Approve, Execute) built into the product architecture. No mutating API call exists anywhere in the codebase.
03 / 05

GDPR & EU Governance

GDPR data residency is an active operational concern, not a checkbox. Where is your data stored? Which AWS regions? Which services touch personal data? GreenPilot surfaces this from the AWS configuration itself — not from a questionnaire. It also flags NIS2 security posture gaps and CSRD emissions signals. No generic FinOps tool does this for the EU regulatory context specifically.

Proof: governance_rules.py implements GDPR data-residency checks, NIS2 posture rules including IAM credential hygiene, and CSRD emissions-reporting observations — all tested, all open source.
04 / 05

Cloud Sovereignty

EU cloud sovereignty is a real and growing policy priority. The European Commission's EUCS scheme, GAIA-X, the Data Act, and NIS2 all point toward the same question: do European companies actually control where their data and workloads live, and can they prove it? GreenPilot makes sovereignty operational — not as a political statement, but as a practical audit: EU regions, least-privilege access, revocable credentials, no lock-in.

Proof: Read-only IAM policy with explicit Deny guardrails, revocable access by design, EU-region awareness built into governance rules, DPA available before onboarding.
05 / 05

Carbon Accountability

CSRD is narrowing its scope for the smallest SMEs for now, but the direction is clear: cloud emissions reporting is becoming a standard business requirement. GreenPilot's carbon methodology is already more honest than most competitors — every figure is labeled as measured, provider-allocated, or modeled. No overclaiming. The methodology is documented and public. That transparency is the differentiator, not the number itself.

Proof: carbon-methodology.md published, carbon.py open source, every output labeled with evidence quality. Aligned with IEA, EMBER, and EEA data sources.

A large, underserved market with structural tailwinds.

The numbers below are sourced from Flexera, Gartner, IDC, and Eurostat. They are cited, not invented.

$805B Global cloud infrastructure spend forecast 2024 Gartner, 2024
28% Average cloud spend wasted across all organisations Flexera State of the Cloud, 2024
$22.8B FinOps & cloud cost management market by 2028 MarketsandMarkets, 2023
99% Of all EU businesses are SMEs — the underserved majority Eurostat, 2023

Why enterprise tools do not solve this

CloudHealth, Apptio Cloudability, and Spot.io are built for organisations with dedicated FinOps teams, complex multi-account structures, and enterprise procurement cycles. They are priced and designed accordingly. A European SME spending €5,000–20,000 per month on AWS is not their customer — and those tools have no EU governance layer.

Why native AWS tools do not solve this either

AWS Trusted Advisor and Cost Explorer surface problems. They do not help you act on them safely, they have no approval workflow, they produce no carbon estimate, and they have no awareness of GDPR data residency, NIS2 posture, or CSRD reporting obligations. The gap between “flagged” and “actioned” is exactly where GreenPilot operates.

Not a concept. A working engine.

Every claim on this page is backed by inspectable, running code. This is what separates GreenPilot from a pitch deck with a product screenshot.

Open-source assessment engine

The full rule engine — cost waste detection, carbon estimation, EU governance observations — is public, MIT-licensed, and runnable in under two minutes from a fresh clone. No black box.

github.com/flango2023/GreenPilot-AI →

56 tests, zero mocked AWS credentials

Every rule, both engine paths, input validation, output escaping, and the live AWS collector are covered by tests. The collector tests use botocore's own Stubber — no real account needed to run the full suite.

View test suite →

Least-privilege IAM policy, structurally tested

The exact IAM policy the live collector needs is committed and tested — including a test that verifies the explicit Deny does not shadow the two Allow-listed IAM reads. Security claims that are verifiable, not asserted.

View IAM policy →

Live AWS integration via boto3

The engine connects to a real AWS account read-only — EC2, EBS, RDS, S3, CloudWatch, IAM credential reports — and produces the same report shape as demo mode. One command, real output.

View sample report →

Documented carbon methodology

The carbon formula, data sources, and known limitations are published. Every output is labeled by evidence quality: measured, provider-allocated, or modeled. No overclaiming.

Read the methodology →

CodeQL + Dependabot on every push

Static analysis and dependency scanning run automatically on every commit. The security posture of the codebase is continuously monitored, not manually reviewed once at launch.

Security model →

Where GreenPilot is going.

Honest about what is built today. Specific about what comes next. No vaporware.

Now — AWS Pilot

Rule-based assessment engine

  • Live AWS collector: EC2, EBS, RDS, S3, IAM
  • Cost waste detection across 5 rule categories
  • Carbon estimate with documented methodology
  • GDPR, NIS2, CSRD governance observations
  • Approval-based workflow: nothing executes without sign-off
  • Open-source engine, MIT licensed
  • EU pilot onboarding active

Multi-account SaaS dashboard

  • Web dashboard: review, approve, track actions
  • Azure integration
  • AI Cost & Carbon Baseline for AWS Bedrock
  • Audit logging and RBAC
  • Expanded CSRD carbon reporting
  • Customer-visible governance score
Future — Scale

ML-driven optimization + GCP

  • ML-based optimization scoring (Phase 2 engine)
  • Google Cloud Platform integration
  • Multi-cloud unified governance view
  • EU-confirmed infrastructure hosting
  • Automated rollback workflows
  • Potential EU-certified cloud governance tooling

Who is building this.

Richard Schmitz
Founder & Engineer
GreenPilot AI

AI Automation Engineer building at the intersection of cloud infrastructure, governance, and applied AI.

Richard Schmitz is an AI and cloud engineer with hands-on experience in AWS infrastructure, machine learning, and FinOps practices. He is currently completing a specialisation in AI Automation, GenAI, NLP, and Governance, with a Master's direction in Computer Vision and Edge AI.

GreenPilot AI started from a direct problem: European SMEs running AWS do not have the tooling to manage cloud cost, carbon, and governance without an enterprise-scale team. Every line of the engine, every test, every IAM policy, and every methodology document was built by Richard — with the discipline of making every claim verifiable before publishing it.

AWS Infrastructure Machine Learning FinOps Python GenAI / NLP EU Cloud Governance AI Automation
GreenPilot AI on LinkedIn

If you are building in the same direction, let's talk.

GreenPilot AI is actively looking for investors, accelerator partners, and strategic collaborators who share the conviction that European companies need purpose-built cloud governance tooling — not a US enterprise tool with a GDPR checkbox bolted on.

Investors

EU-based angels, seed funds, and accelerators aligned with cloud sovereignty, responsible automation, and EU regulatory tailwinds.

Strategic Partners

AWS ISV partners, German Mittelstand tech companies, EU cloud providers, and organisations building in the EUCS / GAIA-X ecosystem.

Accelerators & Hubs

Unicorn Hub, EIT Digital, Antler, Entrepreneur First, and EU-focused deep-tech programmes with a cloud or sustainability track.