FinOpsRelay brings AWS, Azure, Google Cloud, Kubernetes and AI spend into one FOCUS-shaped ledger, then shows the formula and the SQL behind every number it reports.
Pick an organizational unit and every figure in the application narrows to the accounts it owns. The filter is applied inside the query, so no dashboard can forget it.
Generative-AI spend by provider, service and model, with cost per million tokens tracked month over month and a model-to-application cost flow.

Ninety days of cost anomalies ranked by impact, where impact is incurred cost minus expected cost, read straight from the facts.

Forecast monthly, weekly or daily with growth factors, compare against a budget, and save snapshots you can replay later.

Tax, credits and payer-level commitments belong to no team. Reallocation rulesets spread them onto the groups that benefit, with a preview first and a one-call undo.

Rightsizing, commitment purchases and waste are sized from real uncovered spend. Realized Savings splits what you kept into rate and usage optimization, and it reconciles with Cost History.

Measures are the documented formulas, and reports are plain SQL against named datasets. Queries written against AWS CUR or FOCUS column names run unchanged.
Effective Cost = Cost + Amortized Cost − Upfront Fees − Prepays Commitment Coverage %= on-demand equiv. of covered ÷ total on-demand equiv. × 100 Effective Savings Rate= savings from all discounts ÷ on-demand equiv. spend × 100 Realized (Downsizing)= (daily before − daily after) × days in month
SELECT BillingPeriod AS "Month", ServiceProviderName AS "Provider", SUM(EffectiveCost) AS "Cost" FROM MULTICLOUD_FOCUS GROUP BY 1, 2 -- SELECT only · one statement · read-only -- connection · wall-clock deadline
A test suite asserts the things that would otherwise rot quietly. A sample from the ledger:
Python standard library and vanilla ES modules. SQLite is the analytics engine. Starts with one command.
Connect Azure, AWS and Google Cloud accounts, or read Cost Management exports straight from blob storage.
SAML SSO, SCIM provisioning, role-based access and Azure Container Apps Easy Auth.
Stored server-side and never returned to the browser. Reads report only that credentials exist.