When your structured business data — counterparties, contracts, audit trails — lives in a US hyperscaler account, three uncomfortable questions follow you into every enterprise security review: which jurisdiction governs access requests, what happens if the service pulls out of your region, and whether "we encrypt it" is enough for your DPO.
Application data runs on OVHcloud — a European provider — in a European region. Backups go to object storage in the EU jurisdiction. The only American touch is the network edge (Cloudflare) that terminates TLS and absorbs DDoS; payloads are end-to-end encrypted through the tunnel to our origin.
We picked defaults that survive a security questionnaire: per-tenant row-level isolation in Postgres, hash-chained tamper-evident audit, field-level permission evaluation, Argon2id password hashing, daily off-site backups. The checklist exists because we expect the questions.
Teams that want a governed data platform — or a knowledge surface for AI agents — without giving up on residency, sovereignty or a clear sub-processor story. If your answer to "where is our data?" currently involves an apology, we built this for you.
Create a free workspace and see for yourself.