Skip to content
runnerhut
Start building

Fintech

Harbourside moved CI into their own VPC for EU residency

A regulated fintech that needed builds, cache and logs inside the EU, without operating a runner fleet.

EU only
Data residency
−38%
Build time
0
Platform headcount

“Our auditors asked where the build logs live. Being able to answer with one region name ended the conversation.”

— Head of Platform, Harbourside

Harbourside needed every part of CI inside the EU and had been quoted two full-time engineers to operate ARC themselves.

The deployment

  • BYOC on AWS in eu-central-1, inside their existing VPC
  • Cache in their own S3 bucket with a gateway VPC endpoint
  • Default-deny egress with an allowlist built from a week of audit-mode logs
  • IMDSv2 enforced, instance profile scoped to the cache bucket only

The egress audit was the surprise: the allowlist they ended up with contained several destinations nobody had known were dependencies.

Your next build could be twice as fast, at half the price

Start free. Migrating away is the same one line, and we publish that diff too.

Start buildingSee pricing

Related

Northwind LabsA Rust monorepo with a 40-minute cold build, brought under control with sccache and native arm64 runners.Kestrel MobileAn iOS team paying for macOS minutes to run JavaScript tests, and what moving them to Linux did.Orbital Freight120 packages, every one rebuilding on every push, until affected-target detection was configured correctly.