Skip to content

Compliance & Data Residency

Data residency

b'nerd Cloud is operated exclusively in Germany. All infrastructure, data at rest, and data in transit remains within German data centres at all times. There is no cross-border transfer of customer data.

Certifications

Standard Status
ISO 27001 Certified — information security management system
GDPR (EU 2016/679) Compliant — b'nerd GmbH acts as data processor

GDPR

b'nerd GmbH is a German limited company (GmbH) and is subject to German and EU data protection law. As a cloud provider, b'nerd processes customer data as a data processor under Article 28 GDPR. Customers retain the role of data controller for the data they store on the platform.

A standard data processing agreement (DPA) is available on request. Contact hello@bnerd.com or your account manager.

Infrastructure

All physical infrastructure (compute nodes, storage, networking) is housed in certified German data centres operated under ISO 27001-compliant procedures. b'nerd does not use hyperscaler public cloud for production workloads.

Security contact

To report a vulnerability or security incident, email hello@bnerd.com with "SECURITY" in the subject line. For compliance documentation requests, use the same address.