The stack
Where it runs, who can reach it, and what that means legally.
Personal data inside the EU, with a written record of where it lives and who can reach it. This site practises the claim: self-hosted fonts, self-hosted auth, EU-hosted infrastructure, zero third-party scripts.
What is specified, not assumed
- Region
- eu-north-1
- Rollback
- 1 click
- Alerts
- user-visible only
- Certifications
- none — stated plainly
FIG. 1 — Cloud & platform
What we ship in this layer
Cloud architecture
NewAn environment sized for what you actually run, with the bill and the failure modes explained before anything is provisioned.
CI/CD & releases
NewBuild, test and ship on every merge — with staged rollouts and a rollback that takes one click, not one evening.
Monitoring & on-call
NewAlerts that fire on user-visible problems and stay quiet otherwise, because an alarm nobody trusts is worse than no alarm.
Cost optimization
NewFind what you are paying for and not using. Usually the largest line item is something nobody remembers switching on.
GDPR & EU data residency
NewPersonal data kept inside the EU, with a written record of where it lives and who can reach it — answerable to a regulator.
GDPR & EU data residency
A written record of every place personal data lands, who can reach it, and how long it stays. Answerable to a regulator rather than to a marketing page.
Honest limit: no SOC 2 and no ISO 27001. Inventing certifications would be the one fatal move.
Usually goes with
Say what is broken. Or what is missing.
One number and one date come back in writing, from the person who will do the work. Nothing starts, and nothing is owed, until you approve.