EU data residency
All production data and backups stay in Dutch data centers in and around Groningen. Nothing is replicated outside the EU.
Security
Your data stays in Groningen.
Since 2023, everything Reloadify stores lives in data centers in and around Groningen — on ISO-certified Dutch infrastructure, under European law. Not on American servers.
Data residency
Off American servers since 2023.
In 2023 we moved all of our data off American servers. Every database, every backup, every email log now lives in data centers in and around Groningen, the Netherlands — a short bike ride from our office.
Why it matters: data stored on US infrastructure falls under US law, no matter where you are. Data stored in the Netherlands falls under Dutch and European law — full stop. For you that means GDPR compliance by residency, not by legal workaround, and a data processing agreement without an appendix of international transfer clauses.
It also means that when something needs attention, we're dealing with a hosting partner we know personally, in our own time zone, in our own city.
- 2023
- The year we left American servers behind
- 100%
- Of your data stored in the Netherlands — backups included
- ISO 27001
- Certified infrastructure at our hosting provider
- GDPR
- Compliant by residency, not by paperwork
How we protect your data
Security as a habit, not a page.
The practices behind the platform — tested regularly, by people who aren't us.
ISO-certified hosting
Our hosting provider runs ISO 27001-certified infrastructure — physical security, availability, and operations independently audited.
Regular penetration testing
Independent security researchers test the platform on a recurring schedule. Findings are triaged, fixed, and retested.
Encryption in transit and at rest
All traffic runs over TLS, and stored data is encrypted at rest on disk.
Least-privilege access
Access to customer data is limited to the people who need it for their job, protected by two-factor authentication, and logged.
Backups that stay home
Automatic backups run continuously — and they're stored in the Netherlands too, never shipped abroad for convenience.
Our hosting partner
Hosted locally, here in Groningen.
We chose a hosting partner the same way we run the company: local, accountable, and built to last. Our platform runs on infrastructure from a local Dutch provider whose platform is ISO 27001 certified — meaning the physical and operational security of the data centers our platform runs on is independently audited, not self-declared.
Short lines matter. When we need something, we talk to people we know — not a ticket queue on another continent.
Found a vulnerability?
Tell us before you tell anyone else. We respond to every report, fix what's real, and credit researchers who help us. No legal threats for good-faith research.