Security and maintenance
The questions a serious provider answers before they are asked. If something is missing here, ask us β we will answer in writing, in the contract too.
On Regio Development servers, in Romania. We do not rent infrastructure outside the EU and we do not replicate data into other jurisdictions. The exact data centre location and the full list of sub-processors are part of the data processing agreement (DPA), which you receive at quote stage, not after signing.
Romanian and European jurisdiction. There is no chain of parent companies outside the EU that could be compelled to hand over data without your knowledge. That is the practical difference between "GDPR compliant" and "the data is in the EU": many services tick the first without the second.
Nobody. Each client runs on its own virtual machine, with its own database and its own storage. Our technical team's administrative access is limited to designated people, logged, and exists solely for operations β we do not read the content and do not analyse it.
Security
The part where most providers just say "we back up daily".
The storage system is redundant; a failed disk is replaced without stopping the service and without data loss.
Because every client has their own virtual machine, the WHOLE MACHINE can be brought back from backup β with data, configuration, accounts and permissions β not just the files into a manually rebuilt system. We act on the incident procedure, within the term in your plan. Committed availability is 99.5 % or 99.9 %.
The most common real incident, and the easiest to fix: trash and version history handle it without involving us at all. If too much time has passed, backup takes over.
We export your data in its original folder structure, in no proprietary format. Your files are ordinary files. There is no technical lock-in and no exit fee.
The most common way a company loses control of its data is not an attack but a half-finished departure: the account is deactivated, while the direct shares, the group memberships and the public links stay alive. In RegioCloud Admin this is one operation, which first shows what it is about to do, then hands the owned libraries to a successor, revokes the rest, deactivates the account, and leaves a log behind β the proof that it happened, if someone asks a year from now.
Every month you get a short report: storage used and the trend, backup status, incidents β if there were any β and what was updated. Not necessarily so you read it, but so it exists when someone asks.
We will tell you honestly whether moving makes sense β and if it does, what it costs and how long it takes. No sales pitch.