Back to FAQ

FAQ

How do you handle data ownership, hosting, and GDPR compliance?

All data stays under your control. We host in Europe (Google Cloud, often in Belgian or Dutch data centres) according to GDPR-compliant standards.

Data ownership is straightforward: everything your platform stores about your business and your customers belongs to you. We host the infrastructure that runs your software, but you're the data controller in every sense.

For most projects we host in Europe, typically Google Cloud with data centres in Belgium, the Netherlands, or Germany. This means GDPR compliance by default. Data doesn't leave the EU unless there's a specific reason and legal basis, in which case we discuss it with you upfront.

For sensitive sectors like healthcare, finance, government, or education, we add extra measures based on what the sector requires. This can include data encryption at rest and in transit, segregated environments per client, audit logging, role-based access controls, and detailed incident response procedures. If your organisation has a DPO or security officer, we work directly with them to match our setup to your compliance requirements.

At project delivery, you get a technical dossier documenting infrastructure choices, security measures, and data flows. Your DPO or security team can review it. It's meant to make their job easier, not to be a marketing document.

We don't process your customers' personal data ourselves. We build the systems that do, and you remain the data controller with full authority over how that data is handled.

Still have a question?

If your situation isn't quite covered above, that usually means it's worth a proper answer rather than a generic one. Tell us what you're weighing and we'll be straight with you.
We use cookies and similar technologies to enhance your browsing experience, analyze site traffic, and personalize content. You can customize your preferences at any time.
Manage your cookie consent preferences.

These cookies are essential for the proper functioning of our website. They enable core functionality such as page navigation, access to secure areas, and basic user interface features.

These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third-party providers whose services we have added to our pages.

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site.

These cookies are used to deliver advertisements that are more relevant to you and your interests. They are also used to limit the number of times you see an advertisement and help measure the effectiveness of advertising campaigns.