For a standard setup with 5-10 users, we can go live within 5 business days. This includes CIS hardening, configuration of users and groups, and a brief training for administrators. For more complex setups with LDAP integration or customization, we estimate 2-3 weeks.

CIS (Center for Internet Security) Benchmarks are internationally recognized security standards. We configure servers according to these guidelines: unnecessary services disabled, strict access control, firewall rules, automatic security updates, and regular audits. This goes far beyond standard hosting and is comparable to what large enterprises and governments require.

Internet.nl is the official Dutch test for website security, developed by the government. A 100% score means we meet all modern security standards: HTTPS, DNSSEC, security headers, modern TLS configuration, and more. Many websites score below 60% — our servers consistently achieve 100%.

Our primary servers are located in European datacenters with ISO 27001 certification. Backups are stored in geographically separated locations within the EU. All data remains within European borders and falls under European legislation — no American cloud providers subject to the CLOUD Act.

We make daily incremental backups to a geographically separated location. In case of a disaster, we guarantee a Recovery Time Objective (RTO) of maximum 4 hours — that’s the time until your environment is available again. The Recovery Point Objective (RPO) is maximum 24 hours — that’s the maximum data loss during restore. We conduct annual restore tests and report the results.

Yes, as an optional module. With E2E encryption, files are encrypted on the user’s device before they go to the server. Even we as administrators cannot read the content. This is ideal for very sensitive documents, but has an impact on functionality (no server-side preview/search). We’re happy to advise on the right balance for your situation.

Absolutely. We log login/logout events, file access and modifications, and all sharing actions (who shares what with whom). We retain these logs for a minimum of 90 days and can export them on request for compliance audits or internal reviews.

We have a standard Data Processing Agreement that meets GDPR requirements. It clearly states that we are a processor (not owner of your data), which sub-processors we use, and what security measures we take. Signing can be done digitally and usually takes 1-2 business days.

Yes, for new customers we offer a pilot rate for the first 6 months. We also have special rates for foundations and non-profits. Contact us for a custom quote — we’re happy to work with you on a suitable solution within your budget.

We have a 30-day notice period. Upon termination, you receive a complete data export in standard formats. We can assist with migration to another provider if desired — no vendor lock-in, your data always remains yours.