Compliance & Security

EU data residency

Every server is in Frankfurt, Germany. Your data is processed and stored solely in the EU — out of reach of the US CLOUD Act. More background in our GDPR-compliant hosting guide.

Data protection (GDPR)

We process personal data in line with the GDPR and the German BDSG. For customers who use Bthorio as a processor, we provide a data processing agreement (DPA) . The term itself is explained in our glossary under DPA .

Operational security

• Data center in Frankfurt, operated to Tier-IV standards with redundant power and cooling
• Free always-on DDoS protection in front of every IP
• Strictly necessary cookies only — no tracking, no third-party analytics without consent
• Schedulable snapshots and off-site backups ( snapshot vs. backup )

Sustainability

Operations are carbon-neutral: 100% renewable energy in the data center, a long hardware lifecycle and certified e-waste partners.