← Q&A knowledge base
Data and residency Updated 2026-10-30

Where is Maditon's data hosted?

Everything you put into Maditon is hosted in the EU by European-headquartered providers. Compute, the database (UpCloud Managed PostgreSQL) and object storage run on UpCloud in Frankfurt, Germany, the CDN is BunnyCDN on EU-only edge nodes, and identity is Zitadel in Switzerland. The one exception is billing: Stripe may transfer billing details to its US affiliate.

The distinction that matters is between “EU region” and “EU company”. Maditon requires the second.

An EU region of a US-headquartered provider does not solve the problem, because the US parent remains subject to FISA 702 and the CLOUD Act regardless of where the servers sit. So the requirement applied throughout the stack is that each provider is either EU-headquartered or self-hosted on EU infrastructure.

LayerProviderJurisdiction
ComputeUpCloudFinland 🇫🇮 (servers in Frankfurt, Germany 🇩🇪)
DatabaseUpCloud Managed PostgreSQLFinland 🇫🇮 (servers in Frankfurt, Germany 🇩🇪)
Object storageUpCloud Managed Object StorageFinland 🇫🇮 (servers in Frankfurt, Germany 🇩🇪)
CDNBunnyCDN, EU-only edgeSlovenia 🇸🇮
Off-site backup (from 7 December 2026)Bunny Storage, encrypted database backup and a copy of uploaded filesSlovenia 🇸🇮 (storage in Stockholm, Sweden 🇸🇪)
IdentityZitadel CloudSwitzerland 🇨🇭
BillingStripe Payments EuropeIreland 🇮🇪
AnalyticsPlausibleEU (Hetzner Germany) 🇩🇪
Transactional emailMailPaceUK 🇬🇧, EU-hosted

Billing is the exception to that rule. Stripe Payments Europe is an Irish company in a US group, and under Stripe’s own data processing agreement it may transfer billing details — organisation name, billing email, country and VAT number — to Stripe, LLC in the United States, under the EU–US Data Privacy Framework and Standard Contractual Clauses. That is why Stripe receives billing details only, never the content you put into Maditon.

This is architecture, not a configuration toggle. There is no “US region” of Maditon to be moved to.

Read next

A free account runs a real classification on one of your own systems — no card, no sales call.

Run a free classification