EU / EEA

Where it lives.

Registered in the EU/EEA. Operated inside the EU.

Built so compliance is the easy path, not the expensive one.

Data

Primary data stays in the EU/EEA. Who holds root is explicit.

Control

Schema, access, backup and rules are controlled inside that boundary.

Keys

Cryptographic keys can be rotated and revoked without breaking isolation.

Suppliers

Subprocessors that touch personal data are named, bounded and exit-ready.

Trace

Registers, DPIA where required, incident process aligned with GDPR and NIS2-relevant operations.

Operations

Hosting, storage, backup and logging run in the EU/EEA. Processing of personal data follows the same rule unless customer and law expressly open another path.

No silent egress. External connections are explicit and controllable.

Boundaries

Public surface, demo and production stay apart. Market pages are not a CRM. Demos do not share sessions with customer data.