EU residency and security
Data residency
Section titled “Data residency”- The control plane and VM disks are in the EU, on Hetzner servers in Germany.
- There is no US-hosted lobby.
- We use EU sub-processors only. See Sub-processors.
| Data | Where |
|---|---|
| Account email and SSH public keys | EU control plane |
| VM metadata (name, region, shares) | EU control plane |
| VM disk contents | EU NVMe on the VM’s host |
| Proxy logs (IP, host, time) | EU; kept up to 30 days by default |
Isolation
Section titled “Isolation”- Each VM is a full virtual machine with its own kernel, not a container.
- A VM’s HTTPS URL is private until you share it.
- Integrations keep tokens at the edge, so a compromised VM can’t read them.
- A new SSH key can’t sign in until you activate it from the computer that holds it. See SSH keys.
- API tokens can be limited to some commands and given an expiry.
See also the privacy policy.