We’re customers of OVH GmbH which is a cloud company from Europe. The data center which hosts our applications and the data of our customers is located in Germany. We’ve got two separate backup strategies for our customer data. The backups are stored encrypted in at least 3 different geographic regions in Europe. The data centers which hosts our backups are also companies from the EU.

Data-Center

• Maintained by OVH GmbH
• Certifications: ISO27001, SOC II & III, C5, BSI KRITIS and more
• Location: Germany
• GDPR: OVH is a completely european company and therefore also required to fully comply with the GDPR.
• Purpose: Stores customer data, analytical data, system logs.

Encryption

• The communication between all client and server is encrypted with TLS 1.2+.
• The communication between all components which process customer data is encrypted.
• The database is encrypted at rest.
• The database backups are all encrypted before they are stored at any provider.

Backups

• Backups are stored with 2 different strategies in separate workflows.
• Backups are stored in 3+ different geographic locations. All locations are part of the EU.
• Backups are stored by 2 different data-center providers. All data-center providers are at least ISO 27001 certified and EU companies.
• Backups are stored fully encrypted.
• Backups are stored at least daily.