OVERVIEW

2W Tech’s Custom Cloud is a fully managed, private cloud environment built on Microsoft Azure, giving organizations the flexibility of the cloud with the control, security, and performance of dedicated infrastructure.

Each client operates in their own Azure subscription with simple subscription‑based pricing. Custom Cloud provides full control over your Epicor environment — including upgrade timing, database access, and support for customizations and integrations like SQL databases and custom web apps.

Purpose‑built for Epicor, it delivers faster performance, stronger security, and predictable monthly costs, all managed by 2W Tech so your team can stay focused on the business.

BENEFITS

  • Ease of Innovation

    Cloud is built on the most up-to-date version of Epicor software, meaning that you’ll always have access to the most innovative and customer-driven software.
  • Compelling Economic Benefits

    No hardware and less overhead leads to a 25-40% reduction in cost compared to on-premises deployments.
  • Better Use of IT Resources

    Free-up IT resources to focus on value-added activities and less on fielding security breaches and patching servers.
  • Greater Security

    Always-on cloud security enables massive redundancies and failsafe protection.

  • Upgrades

    Automatic upgrades take the guesswork out of when to upgrade your software, but you can defer if the
    timing doesn’t work for you.
  • Mobility and Collaboration

    Anytime, anywhere access to the information your employees need to collaborate effectively.
  • Alignment and Engagement

    Standardized processes and get all employees on the same page.
  • Reduced Risk

    Data backups and advanced security systems help mitigate risk.

  • Faster Time to Value

    Cloud solutions may be deployed quickly and reflect real-time updates.





  • Access to Cutting Edge Technology

    Easily integrate your ecosystem of tools like artificial intelligence, financials, business intelligence applications, and more to make informed business decisions.

Kinetic Custom Cloud FAQs

Get answers to frequently asked questions about Kinetic Custom Cloud, a dedicated, single-tenant
Epicor Kinetic ERP hosting solution jointly delivered by 2W Technologies and Epicor.

Download the PDF version here

What is Kinetic Custom Cloud?
Kinetic Custom Cloud is a dedicated, single-tenant Epicor Kinetic ERP hosting solution jointly delivered by 2W Technologies and Epicor. It offers enhanced control, customization, and flexibility for organizations that need advanced integrations or regulatory compliance beyond Epicor’s standard multi-tenant SaaS.

Who manages what in the Custom Cloud model?
  • Epicor: ERP functional support, user guidance, and application troubleshooting.
  • 2W Tech: Infrastructure, OS/SQL management, ERP patching, backups, monitoring, security, and documentation.
  • Client: User governance, endpoint security, data classification, and internal policies.

Is Kinetic Custom Cloud compliant with NIST 800-171 and CMMC Level 2?
  • GCC High: Designed to meet all 110 NIST 800-171 controls and is CMMC Level 2 ready (with U.S.-only data residency and personnel).
  • Public Cloud: Meets technical controls with mitigations but lacks FedRAMP High authorization.

Can Kinetic Custom Cloud handle CUI or ITAR data?
Yes—in GCC High only (required for full compliance with ITAR/CUI regulations.)

Is data encrypted?

Yes (both variants):

  • At rest: AES-256 (FIPS 140-2 validated).
  • In transit: TLS 1.2+
  • Optional: Customer-managed keys.

Who patches the ERP application?
2W Tech performs all Kinetic ERP patching and quarterly updates.

What are the SLAs?

Availability: 99.7%

Response times:

  • Sev C: < 4 business hours.
  • Sev B: < 2 hours.
  • Sev A: < 1 hour.

What is the disaster recovery posture?
RTO: 4 hours; RPO: 15 minutes; with routine testing and drills.

Does 2W Tech support DFARS 72-hour reporting?
Yes. 2W Tech notifies the client within 24 hours of an incident affecting CUI and provides evidence for the client’s 72-hour DoD report.

Does the client receive server-level access?

No. For security and compliance reasons, clients do not receive OS-level access. They do receive:

  • Integration host access
  • Application-level access
  • API access as needed

What is not included in the base service?

The following services are not included in the base Kinetic Custom Cloud service but are available as separate add-on SKUs:

  • ERP upgrades: Major version upgrades outside quarterly patching are scoped and quoted separately.
  • VPN, Azure Virtual Desktop, or Remote Desktop setup: Remote-access solutions can be added as needed.
  • Client installation services: On-premises installation of Epicor clients, workstations, or integration hosts is not included. The cloud environment itself is always fully installed and built by 2W.
  • Epicor licensing: Epicor software licenses must be purchased separately.
  • Custom integrations: Any integrations beyond standard Epicor functionality (e.g., third-party apps, custom APIs) are quoted and delivered as scoped projects.
  • Other add-ons: Any additional modules, analytics, or tools not listed in the “What’s Included” section.All excluded items above are available as add-on SKUs. If you need any of these, just ask your 2W account manager for a quote or proposal.

Will Kinetic Custom Cloud users be forced into an upgrade cadence?
Version upgrades are customer-directed, as long as they remain within 2 major versions of the current release.

Will users still be able to access API endpoints without using Automation Studio?
REST endpoints are available via VPN or public HTTPS. Customers can also access APIs from an integration server hosted in the same environment.

How is Kinetic Custom Cloud different from Epicor SaaS?
Aspect Epicor SaaS Kinetic Custom Cloud
Tenancy Multi-tenant Single-tenant
Management Epicor only Epicor and 2W Tech
Customization Standardized or limited Highly customizable
Support Model Epicor only Shared
Ideal For Standardized operations Complex integrations, customizations, or regulatory needs

Can the environment scale?

Yes – easily, without downtime or disrupting operations.

  • Scale Up: Add CPU/RAM to existing components.
  • Scale Out: Add compute, storage, SQL capacity, or bandwidth.

What is the difference between GCC High and Public Cloud?
Feature GCC High Public Cloud
FedRAMP High / DoD IL4/5 Yes No
U.S.-only data residency Yes Not guaranteed
U.S. personnel support Yes Not guaranteed
Suitable for CUI/ITAR Yes Not recommended
Meets NIST 800-171 Fully With mitigations

Does Public Cloud meet DFARS 252.204-7012?
It meets many technical controls but lacks FedRAMP High authorization and U.S. personnel guarantees. Suitable for FCI, commercial data, pre-CUI environments, or clients planning future migration to GCC High.

How is identity and access managed?
Entra ID (Azure AD) with MFA, Conditional Access, SSO, Privileged Identity Management (PIM), least privilege enforcement

What are the support tiers?
  • Tier 1: Epicor (application support)
  • Tier 2: 2W Tech (infrastructure support and ERP maintenance)
  • Tier 3: Microsoft Premier Support.

How are backups handled?
Daily full image + database backups; transaction logs every 15 minutes; 30-day retention (customizable); geo-redundant storage.

How are security incidents handled?

2W Tech and Epicor follow a coordinated incident response workflow that includes:

  • Preparation
  • Detection and identification
  • Containment
  • Eradication and recovery
  • DFARS reporting support
  • Post-incident review

What does the client remain responsible for?
  • User access decisions
  • Endpoint security
  • Internal policies (training, HR, insider threat)
  • DNS entries
  • Providing a point of contact
  • Data classification (CUI, ITAR etc.)
  • On-prem integrations

What is included with Kinetic Custom Cloud?
  • Full build and installation of the Kinetic Custom Cloud environment (in Azure Commercial or GCC High)
  • SQL and Windows licensing
  • Infrastructure management and monitoring
  • ERP patching and quarterly updates
  • Security tools and backups
  • Disaster recovery setup
  • Tier 2 support from 2W Tech

Will customers still have access to load external or custom DLLs in Kinetic Custom Cloud?
Yes. Custom external code can be added during initial deployment or via EpicCare case.

In a Kinetic Custom Cloud environment, can I take a 10.2.700 environment and upgrade to
Kinetic in the SAAS environment?
The upgrade from Epicor ERP 10 to Kinetic should be done at migration to Custom Cloud. The setup fee includes two upload/update passes of the database.

More Resources: