Hosting and infrastructure

Saku is hosted in the European Union (Hetzner, Germany). Application and database infrastructure runs in EU regions so your data stays within the European Union, in line with EU data protection expectations. Traffic is protected and accelerated via Cloudflare (DDoS protection, caching, and edge delivery).

Encryption

Data in transit is protected with TLS (HTTPS). Data at rest is stored on encrypted storage (application and database on Hetzner; images and files on AWS S3). Authentication uses industry-standard practices; we do not store plain-text passwords. Payment data is handled by our payment provider and never stored on our servers.

Backups and availability

We take regular backups of your data. Backups are stored securely and used for recovery and business continuity. We aim for high availability; planned maintenance is communicated where appropriate.

Access control

Access to production systems and data is restricted to authorised personnel, on a need-to-know basis. We use strong authentication, principle of least privilege, and audit logging where relevant. Team and board access within Saku is controlled by roles and invitations.

Security incidents and reporting

If you discover a security issue or suspect unauthorised access, please report it promptly. We will investigate and respond in line with our incident process and, where required, notify regulators and affected users. Contact: [email protected] or [email protected].