Executive summary
Few decisions shape the long-term economics of a trading operation as much as where its ETRM platform runs. For decades the answer was on-premises by default: buy the hardware, house it, staff it, and upgrade it every few years. Cloud-native deployment has changed that calculus completely, and the question every energy firm now faces is not whether the cloud is viable but whether the old on-premises assumptions still serve the business.
This comparison is written to cut through the marketing. It looks at the two models across the dimensions that actually matter to a trading desk, cost, scalability, real-time capability, security, upgrades, and total cost of ownership, and it is honest about where on-premises still has a legitimate role. The conclusion is not that cloud wins every debate, but that for most firms the balance has shifted decisively, and that security and data residency requirements should shape the deployment model rather than force a compromise on capability.
It builds on our complete guide to modern ETRM software and our look at why legacy systems hold firms back. If you are weighing a deployment decision, this is the practical framework.
What "cloud-native" actually means
The phrase gets used loosely, so it is worth being precise. Cloud-native does not simply mean an old application moved onto a rented server. That is lift-and-shift, and it carries the old architecture, and its limitations, into someone else’s data center. Cloud-native means the platform was designed to run on elastic cloud infrastructure from the start.
The defining traits are elastic scaling that expands and contracts with demand, managed services that remove the burden of running databases and message queues, containerization and orchestration for resilience, continuous deployment for frequent low-risk releases, and multi-tenancy that spreads the cost of operating the platform across many customers. A genuinely cloud-native ETRM stays current and scales without the firm provisioning anything.
On-premises, by contrast, means the firm owns and operates the infrastructure: servers sized for peak load, housed in the firm’s own or a co-located data center, maintained and upgraded by the firm’s own staff. It offers maximum direct control at the cost of maximum operational burden.
The cloud maturity model
Firms do not jump from on-premises to cloud-native in one step; they climb a recognizable ladder, and knowing which rung you are on clarifies the next meaningful move. Analysts such as Gartner and IDC describe cloud adoption as exactly this kind of staged progression rather than a single migration.
The crucial distinction is between the middle rungs and the top. A lift and shift or even a managed cloud deployment relieves hardware pain but can still run a batch monolith. Only at the cloud-native rung do elastic scale, event-driven processing, and continuous delivery become the natural state, and only at the AI-native rung is intelligence grounded in a governed data model. Mistaking a lift and shift for true cloud-native is the most common and most expensive error in this space. This mirrors the modernization ladder in why legacy ETRM holds companies back.
Cloud-native reference architecture
Underneath the label, a cloud-native ETRM is a specific and now well-established set of building blocks. It is worth seeing them named, because they are what make elastic scale and real-time processing possible rather than aspirational.
The components that matter include containers (Docker) orchestrated by Kubernetes; a service mesh for secure service-to-service traffic; an API gateway as the single front door; event streaming through Kafka so trades and market data flow in real time; Redis and in-memory caches for low-latency reads; object storage for cheap, durable data; autoscaling to absorb volatile volume; observability (metrics, logs, traces) so the platform is transparent in production; and infrastructure as code so environments are reproducible and auditable. These are developed further in streaming market data with Kafka and API-first ETRM platforms.
Cost: capex, opex, and what hides in between
The headline cost difference is the shape of the spend. On-premises is capital-heavy: large up-front hardware and licence purchases, refreshed on a multi-year cycle, plus the ongoing cost of running a data center. Cloud-native is operational: a predictable subscription that scales with use, with no hardware to buy or refresh.
But the real story is in the costs that hide between the line items. The table below lists the operational costs that rarely appear on a licence quote but dominate the true total cost of ownership of an on-premises platform.
| Hidden cost | Where it lands |
|---|---|
| Technical debt | Accumulated customizations that must be maintained and re-tested indefinitely. |
| Upgrade projects | Periodic, expensive, high-risk programs rather than continuous delivery. |
| Idle infrastructure | Capacity provisioned for peak that sits unused most of the time. |
| Specialist skills | Scarce, expensive staff to run databases, servers, and the platform. |
| Downtime | Lost trading and operational capacity during outages and maintenance windows. |
| Hardware refresh | Multi-year capital cycles to replace ageing servers and storage. |
| Licensing | Per-core or per-server licences that scale with the hardware, not the value. |
| Database support | Enterprise database licences and DBA time. |
| Integration maintenance | Bespoke point-to-point connections rebuilt and patched over time. |
Cloud-native absorbs most of these into the subscription: infrastructure becomes elastic and usage-based, upgrades become continuous, and specialist operations shift to the provider. That is why total cost of ownership, not licence price, is the number that matters. We cover the compounding effect in depth in the cost of standing still.
Cloud-native vs on-premises, side by side
The trade-offs are clearest in a direct comparison across the dimensions a trading firm weighs.
| Dimension | On-premises | Cloud-native |
|---|---|---|
| Up-front cost | High (capex) | Low (opex subscription) |
| Scalability | Vertical, provisioned for peak | Horizontal, elastic on demand |
| Upgrades | Complex projects | Continuous, managed |
| Time to deploy | Months | Weeks |
| Real-time capability | Limited by batch design | Native |
| Maintenance burden | On the firm | On the provider |
| Resilience / DR | Firm-built | Built-in redundancy |
| Global access | VPN / network dependent | Web-based, anywhere |
| Data residency | Full local control | Configurable by region |
| Total cost of ownership | Higher over time | Lower over time |
The pattern is consistent: on-premises trades higher cost and slower change for maximum direct control, while cloud-native trades a degree of that control for lower cost, faster change, and native real-time capability. For most desks the second column now describes what the business actually needs.
Scalability and performance
Trading volume is not constant. It spikes with volatility, with new products, and with market events, and an on-premises platform has to be sized for the peak, which means paying for capacity that sits idle most of the time. When the peak is exceeded, performance degrades exactly when the desk can least afford it.
Cloud-native platforms scale horizontally and elastically, adding capacity when volume rises and releasing it when volume falls. That elasticity is not just a cost benefit; it is what allows real-time valuation and risk to stay current under load rather than falling behind into a batch. In a market defined by intraday volatility, that difference is material.
Concretely, the performance characteristics that matter are horizontal scaling to add compute on demand, high event throughput so streaming market data and trades are processed as they arrive, parallel valuation and distributed risk calculations that fan work across many nodes, and elastic compute that expands for peak trading days, month-end, or volatile sessions and contracts again afterwards. An on-premises platform sized for the average is overwhelmed on the peak; one sized for the peak is wasted the rest of the time. Elasticity resolves that dilemma, which is why it underpins the real-time risk described in building real-time risk dashboards.
Real-time capability
This is where architecture, not hosting, decides the outcome. A batch-oriented platform does not become real-time by moving to the cloud; it becomes a batch platform running in the cloud. Real-time valuation, risk, and reporting require a design built around a single governed data model and event-driven processing, which is a hallmark of cloud-native platforms and a rarity in on-premises legacy ones.
The practical consequence is that a genuinely cloud-native ETRM reprices the book continuously as trades and prices change, so position, P&L, and risk reflect the market now rather than at last night’s close. That is the capability our guide to modern ETRM describes as the natural state of a shared-model platform.
Security and compliance
Security is the concern raised most often against the cloud, and it deserves a straight answer. Modern cloud-native platforms offer strong authentication, role-based authorization, encryption in transit and at rest, continuous monitoring, and compliance certifications that many firms would struggle to match in their own data centers. The cloud is not inherently less secure; in many respects it is more so.
A modern cloud security posture is built from specific, recognizable controls: a Zero Trust model where nothing is trusted by default; identity federation and IAM for centralized, role-based access; secrets management and HSM/KMS for keys and credentials; network segmentation, a WAF, and DDoS protection at the perimeter; a SIEM for continuous monitoring and alerting; and independent attestations such as SOC 2 and ISO 27001. Few individual firms can match that depth in their own data centers.
Where genuine constraints exist, they are usually about data residency and regulatory requirements, not security per se. A good platform addresses these with deployment flexibility: managed multi-tenant SaaS for most firms, private single-tenant cloud for those needing isolation, and on-premises for the minority with strict residency or air-gap requirements. The principle is that security and residency should shape the deployment model, not force a compromise on capability. See how Gravitas approaches security and data lineage and governance.
Resilience and disaster recovery
Resilience is where cloud-native architecture quietly earns its keep. Rather than a single data center that is a single point of failure, a cloud-native platform is built to survive component, zone, and even regional failures with little or no interruption to the desk.
The relevant patterns are multi-region and multi-AZ deployment so a failure in one location does not take the platform down; active-active or active-passive topologies depending on the recovery objectives; formal disaster recovery with explicit RPO and RTO targets (how much data and time a firm can afford to lose); self-healing infrastructure that replaces failed nodes automatically; and rolling upgrades that update the platform without downtime. Matching this on-premises requires a second data center and a standing DR practice that few desks can justify, which is a large part of why cloud-native resilience is so compelling.
AI infrastructure: the new differentiator
The most consequential recent shift is that cloud-native architecture is now the foundation for AI on the trading desk, and legacy on-premises platforms simply cannot provide it at reasonable cost. Running modern AI requires infrastructure that is elastic, GPU-capable, and integrated with governed data, exactly what a cloud-native platform is built to deliver.
The capabilities cloud-native infrastructure unlocks include AI inference and model serving at scale; GPU workloads provisioned on demand rather than bought outright; vector databases for semantic search over trading data; retrieval-augmented generation (RAG) so an AI copilot answers from the firm’s governed book rather than the model’s training alone; agentic AI for multi-step operational workflows under human control; and LLM governance, the explainability, model monitoring, prompt control, and audit trail that make AI safe to use in a regulated domain. This is the dividing line between a platform ready for the next decade and one merely hosted in the cloud, and it is developed in the future of AI-native ETRM and the AI and grid forces reshaping the market.
Upgrades and maintenance
On-premises upgrades are the pain point firms feel most acutely. Because the system is customized and self-hosted, each upgrade is a project: test environments, regression testing, downtime windows, and the risk that customizations break. Firms defer upgrades to avoid the pain, and end up stranded on unsupported versions.
Cloud-native platforms are maintained centrally and updated continuously, so the firm is always on the current version without running an upgrade project. Improvements arrive as configuration rather than as a fresh implementation each time, which is what keeps a modern platform evolving with the market rather than frozen against it.
When on-premises still makes sense
Cloud-native is the right answer for most firms, but not all, and it is worth being honest about the exceptions. On-premises or private-cloud deployment remains appropriate where strict data-residency rules require data to stay within specific borders or facilities, where regulatory or contractual terms mandate physical control, or where an air-gapped environment is genuinely required.
The important point is that these are deployment requirements, not reasons to accept a legacy architecture. A modern platform can meet residency and control requirements through private-cloud or on-premises deployment while still delivering the single governed model, real-time capability, and API-first design that define a modern ETRM. The deployment model and the architecture are separate choices, and a good platform lets you make them independently.
Making the decision
A sound deployment decision starts from requirements, not defaults. Work through a short set of questions: what are your genuine data-residency and regulatory constraints? How variable is your trading volume, and how much would elasticity save? How much is your firm currently spending on infrastructure, upgrades, and the staff who run them? How important is real-time capability to your desk? And what is the total cost of ownership of each option over a realistic horizon, not just the licence price?
The deployment decision matrix below compares the five realistic options across the dimensions that decide the choice. Read it as guidance rather than a formula; the right answer depends on your specific constraints.
| Model | Cost | Security | Control | Compliance | Operations | Scalability |
|---|---|---|---|---|---|---|
| SaaS (multi-tenant) | Lowest | Strong, shared | Lower | Broad certifications | Provider-run | Elastic |
| Private cloud | Medium | Strong, isolated | Medium | Configurable by region | Mostly provider | Elastic |
| Hybrid cloud | Medium to high | Strong, mixed | Medium to high | Flexible | Shared | Good |
| On-premises | Highest (capex) | Firm-controlled | Highest | Full local control | Firm-run | Provisioned |
| Air-gapped | Highest | Maximum isolation | Maximum | Strictest | Firm-run | Provisioned |
Having chosen a target, the move itself follows a phased roadmap that keeps each step reversible.
For most firms the answers point to cloud-native, with private-cloud or on-premises reserved for genuine residency needs. The deciding factor is rarely a single feature; it is the compounding advantage in cost, agility, and real-time capability that a cloud-native architecture delivers year after year. The migration mechanics are covered in how to migrate to a new ETRM platform.
Why Gravitas gives you the choice
Gravitas is cloud-native by design, so it delivers elastic scale, continuous updates, and real-time capability as its natural state. But because deployment and architecture are separate choices, it offers the flexibility that residency and regulatory requirements demand:
- Managed SaaS for firms that want the full cloud-native benefit with no infrastructure to run.
- Private cloud for those needing single-tenant isolation.
- On-premises for the minority with strict residency or air-gap requirements.
In every case the platform is the same, and the value comes from architectural principles rather than a feature list: cloud-native by design, API-first, event-driven, a single governed data model, configuration-first, AI-ready, and deployment flexibility. That combination delivers one governed model, real-time valuation and risk, and multi-commodity support at economics that suit desks the incumbents priced out. See how it is scoped or request a demo to discuss the right deployment for your firm.
Sources and further reading
The market and adoption context in this guide draws on public analysis from industry analysts, cloud providers, and energy agencies. Figures and positions are as reported by those sources at the time of writing; readers should consult the originals for detail and the latest data.
Industry analysts such as Gartner and IDC on cloud adoption and digital transformation; cloud providers’ energy practices, AWS Energy, Microsoft Azure Energy, and Google Cloud, on reference architectures and AI infrastructure.
The International Energy Agency (IEA) Electricity 2026 and Energy and AI (iea.org) on AI-driven electricity demand and grid change; and market operators, FERC (ferc.gov) and Europe’s ENTSO-E, on market structure and grid operation.
These references support the market and technology backdrop; the architecture and platform views are Gravitas’s own, and citations do not imply endorsement by the cited organizations.
Frequently asked questions
What is a cloud-native ETRM?
A cloud-native ETRM is a trading and risk platform designed from the ground up to run on elastic cloud infrastructure, using managed services, containerization, continuous deployment, and often multi-tenancy. It differs from a legacy application simply hosted on a rented server, which carries the old architecture along.
Is cloud ETRM secure enough for trading?
Yes. Modern cloud-native platforms offer strong authentication, role-based access, encryption in transit and at rest, continuous monitoring, and compliance certifications that many firms would struggle to match on-premises. Genuine constraints are usually about data residency rather than security itself.
What is the cost difference between cloud and on-premises?
On-premises is capital-heavy (hardware, licences, refresh cycles, data-center operations), while cloud-native is a predictable operational subscription that scales with use. The decisive number is total cost of ownership over time, which usually favours cloud-native once staff, over-provisioning, and upgrade projects are counted.
Can a cloud ETRM meet data-residency requirements?
Yes, through deployment flexibility: region-specific cloud deployment, private single-tenant cloud, or on-premises where strict residency or air-gap rules apply. Security and residency should shape the deployment model, not force a compromise on capability.
Does moving to the cloud make an ETRM real-time?
Not by itself. Real-time capability comes from architecture, a single governed data model and event-driven processing, not from hosting. A batch-oriented system moved to the cloud is still a batch system. Genuinely cloud-native platforms are real-time by design.
How much faster is a cloud ETRM to deploy?
Cloud-native deployments are typically measured in weeks rather than the months an on-premises implementation requires, because there is no hardware to provision and the platform is configured rather than custom-built.
What are the downsides of cloud ETRM?
The main considerations are data-residency and regulatory constraints for firms in specific jurisdictions, and reliance on connectivity. Both are addressable through deployment options and standard resilience practices; for most firms the advantages outweigh them.
When does on-premises still make sense?
Where strict data-residency rules require data to stay within specific borders or facilities, where regulation or contracts mandate physical control, or where an air-gapped environment is required. These are deployment requirements, not reasons to accept a legacy architecture.
How do upgrades work in a cloud ETRM?
They are continuous and managed centrally, so the firm is always on the current version without running an upgrade project. Improvements arrive as configuration rather than a fresh implementation each time.
Is multi-tenancy safe for competitors on the same platform?
Yes. Multi-tenant platforms isolate each customer’s data through strict access controls and encryption, so tenants cannot see one another’s data. Firms with stricter isolation needs can choose single-tenant private cloud.
How does cloud scalability help trading?
Elastic scaling adds capacity when volume spikes with volatility or new products and releases it when volume falls, so performance stays consistent without paying for idle peak capacity. It is also what lets real-time valuation and risk stay current under load.
What is total cost of ownership for an ETRM?
TCO includes licence or subscription, infrastructure, the staff who run and upgrade the system, over-provisioning, upgrade projects, and the reconciliation and integration burden. It is a far better basis for comparison than licence price alone, and it usually favours cloud-native.
Can we start on cloud and move on-premises later, or vice versa?
A platform where deployment and architecture are separate choices lets firms select and change deployment as requirements evolve, keeping the same capabilities across managed SaaS, private cloud, and on-premises.
Does cloud ETRM work for multi-commodity trading?
Yes. Cloud-native, multi-commodity platforms hold power, gas, LNG, oil, ags, metals, and environmental products on one governed model, so positions net and risk aggregates across commodities regardless of deployment.
How do we choose between cloud and on-premises?
Start from requirements: genuine residency and regulatory constraints, volume variability, current infrastructure spend, the importance of real-time capability, and total cost of ownership over a realistic horizon. For most firms the answer is cloud-native, with private or on-premises reserved for genuine residency needs.
Download this article as a PDF
Get a clean, branded PDF of this article to read offline or share with your team. Enter your name and corporate email and we’ll send the download link to your inbox.
Where should we send it?
Enter your details and we’ll email you the PDF download link. We use a corporate email to keep this list professional.
Check your inbox
We’ve emailed the PDF download link to your email. It should arrive in a moment. If you don’t see it, check your spam folder.