Trust
Your workspace data stays in the EU.
Kanroo Cloud runs on European infrastructure from European companies. Here is every party involved, what it does, and where.
- Hosted in the EUGermany · Netherlands · FranceWorkspace data is hosted and processed in the EU. Both sub-processors are European.
- Developed in GermanyMade in BavariaKanroo is developed in Germany.
- ISO/IEC 27001-certified infrastructurenetcup · ScalewayBoth hosting providers hold an ISO/IEC 27001 certificate. The certificates belong to them.
- GDPR: DPA includedArt. 28 GDPR, published in fullEvery customer gets our data processing agreement, with our measures and sub-processors.
- Open-source coreAGPL-3.0Read the code and run it yourself. Kanroo Cloud runs the same core.
No AWS. No Azure.No Google Cloud. No Cloudflare.
Your workspace data is not hosted, stored or processed on any of them.
Kanroo Cloud runs on netcup in Germany and Scaleway in France and the Netherlands. That is the full sub-processor list.
Push notifications, if you turn them on, pass end-to-end encrypted through your browser vendor’s push service.
We don’t sell or share your data.
Every party on one map
Servers in Germany. Files in the Netherlands. Email from France. Turn on the other parties to see who else is involved, and why none of them gets your workspace data.
| Company | Where | What it does |
|---|---|---|
| netcup GmbHWorkspace data | Nuremberg, Germany | Servers for the app, database, mail and monitoring |
| Scaleway SASWorkspace data | Amsterdam, Netherlands | Object storage for files |
| Scaleway SASWorkspace data | Paris, France | Transactional email |
| netcup GmbHCompany seat | Karlsruhe, Germany | Seat of netcup GmbH |
| Polar Software, Inc.Other party, no workspace data | USA | Sells paid plans as merchant of record |
| GitHub, Inc.Other party, no workspace data | San Francisco, USA | Hosts our source code and container images |
| Let’s Encrypt (ISRG)Other party, no workspace data | USA | Issues our TLS certificates |
Sub-processors
Two companies process workspace data for us. Both are European. This table comes straight from Annex 3 of our data processing agreement.
| Company | Service | Location of processing |
|---|---|---|
| netcup GmbHEmmy-Noether-Straße 10, 76131 Karlsruhe, Germany | Server hosting for the application, database, mail server, and monitoring | Nuremberg, Germany |
| Scaleway SAS8 rue de la Ville l'Évêque, 75008 Paris, France | Object storage for files | Amsterdam, Netherlands |
| Scaleway SAS8 rue de la Ville l'Évêque, 75008 Paris, France | Transactional email | Paris, France |
We tell customers by email at least 14 days before we add or replace a sub-processor. You can object.
Read the data processing agreementWhere your data is stored is only half the story
Three questions matter. Where is your data stored? Where is it processed? And which country’s law applies to the company that runs the servers?
Storage location
The data center that holds your data.
Processing location
Where the data is read, changed and backed up. This includes remote access by staff.
Jurisdiction
Which country’s courts can give orders to the company that controls the data. It follows the company, not the server.
The third question is easy to miss. Under the US CLOUD Act, a provider under US jurisdiction must hand over data it controls, wherever that data is stored. An EU region of a US provider is still a US provider.
How Kanroo answers it
Kanroo Cloud stores and processes your boards, wikis and files only with two EU companies. Neither has a US parent company.
netcup GmbHGermany
Seat in Karlsruhe. Part of the Austrian Anexia group. Runs our servers in its data center in Nuremberg.
Scaleway SASFrance
Seat in Paris. Part of the French iliad group. Stores our files in Amsterdam and sends our email from Paris.
One honest note: paid plans are billed by Polar Software, Inc., a US company. Polar receives billing data, such as your organization name and billing email. It never receives your boards, wikis or files.
Built on certified infrastructure
Both of our hosting providers hold an ISO/IEC 27001 certificate for their information security management. Checked on 14 October 2026.
- ISO/IEC 27001:2022
netcup GmbH
Our server provider
- Issued by TÜV NORD CERT, valid until November 2027.
- Scope: web hosting, virtual servers, domains, SSL certificates, groupware, software and managed hosting.
- ISO/IEC 27001:2022
Scaleway SAS
Our provider for file storage and email
- Issued by BSI, certificate IS 787020.
- The scope includes Object Storage.
These certificates belong to our providers.
Other parties, outside your workspace data
These parties are not sub-processors. We list them so that nothing is hidden in a footnote.
| Party | Country | What it gets | Why it is not a sub-processor |
|---|---|---|---|
| Polar Software, Inc. | USA | The owner’s email address and internal user ID, a billing email address if the owner enters one, the organization name, an internal organization ID, the plan and the number of seats. After an ownership transfer, also the new owner’s name. Polar collects payment and tax data itself. | Sells paid plans as merchant of record. It processes the billing data we send as our processor, and its checkout data as its own controller. It never receives boards, wikis or files, so it is not a sub-processor for your workspace data. Free plans send nothing to Polar. |
| Your browser’s push service | Chosen by your browser vendor | An end-to-end encrypted message it cannot read | Only if you turn on push notifications. Your browser vendor runs it. |
| Let’s Encrypt (ISRG) | USA | Our domain names | Issues our TLS certificates. It gets no customer data. |
| GitHub, Inc. | USA | Our source code and container images | Part of our software supply chain. It gets no customer data. |
For Kanroo Cloud customers, paid plans are the only transfer of personal data to a third country. If you contribute to the public repository, GitHub (USA) is involved too.
Read the privacy policyWhat we run ourselves
The usual SaaS stack sends data to a dozen vendors. We run these parts on our own servers at netcup in Nuremberg instead.
Mail server
Our own mail server with spam filtering. Sign-in codes and notifications leave through Scaleway in Paris.
Monitoring
Our own monitoring on our own servers. Logs contain no IP addresses and no browser information.
Web analytics
Rybbit, one of our Open Source Friends, on our own servers. No cookies, nothing stored on your device.
DNS
The kanroo.app zone is served by netcup.
Fonts and assets
Bundled with the app. The app loads nothing from third parties and uses no CDN.
No Datadog, no Sentry, no Google Analytics.
Security measures
The short version of the technical and organizational measures in Annex 2 of our data processing agreement.
- No passwords
- You sign in with a one-time email code or single sign-on (SSO). Codes are stored as hashes, expire after 10 minutes and allow three attempts.
- Protected admin access
- Administration only through a private VPN. SSH with keys only, no root login.
- Encrypted secrets
- Secrets for webhooks, push subscriptions and SSO are encrypted with AES-256-GCM.
- Encrypted files
- Files in object storage are encrypted at rest.
- Encrypted connections
- Connections from users use TLS. Traffic between our servers runs encrypted through a private VPN.
- Separated organizations
- The app checks the organization on every access. Roles decide who may read and change content.
- Audit log
- Security-relevant actions are recorded with time and person. Owners and admins can review them.
- Rate limits
- Requests are rate-limited to protect the service against overload and abuse. Our Fair Usage Policy says what counts as abuse.
How we protect your data
Every customer gets a data processing agreement under Art. 28 GDPR. Annex 2 lists our technical and organizational measures. Annex 3 names our sub-processors, and all of them are in the EU. We publish these documents in full, so you can check them before you start.
Read the data processing agreementFound a vulnerability?
Write to security@kanroo.app. You can also use our report form with the label Security.
security.txtTransparent by default
You should not have to ask before you decide. This is what we make public, and where to find it.
Every party involved
Both sub-processors and every other party, including Polar, which bills paid plans.
Every plan limit
The limits of every plan in one table, next to the price.
The full agreement
Our data processing agreement in full, with its measures and sub-processors.
Our roadmap
What we plan and build, on our public roadmap board.
The gaps
What Kanroo does not do yet, before you move a team.
The code
The open-source core under AGPL-3.0. Kanroo Cloud runs the same core.
Dated comparisons
Every comparison with other tools names the date we checked and links its sources.
Missing something here? Ask us.
Documents
The legal texts behind this page.
- Data processing agreementArt. 28 GDPR, with the measures (Annex 2) and sub-processors (Annex 3).
- Privacy policyWhat we process on this website and in Kanroo Cloud, and why.
- Terms of serviceThe contract for Kanroo Cloud, for businesses.
- ImprintWho runs Kanroo, with address and contact.
- Open-source licenseThe Kanroo core is AGPL-3.0. Read the code yourself.
Questions about data protection?
We answer every question about hosting, the agreement, our measures and the Enterprise Edition.