SECURITY & PRIVACY
Your domain list stays yours.
Hosted in the European Union, encrypted everywhere, and built so we only read what monitoring needs.
- Hosted in the EU
- GDPR
- 2FA
- Encrypted at rest
Hosting in the EU
- Servers and backups in the EU
- Daily encrypted backups, kept 30 days
- Isolated production environment
Encryption
- TLS 1.2+ on every connection
- AES-256 encryption at rest
- Registrar tokens stored in a separate vault
Account protection
- Two-factor authentication for every user
- 2FA enforcement for the whole workspace on Pro
- Session list with remote sign-out
Access control
- Roles: owner, admin, member, viewer
- Scoped API tokens, read or read and write
- SAML SSO and SCIM on Enterprise
Audit and logs
- Audit log of every change on Business
- Export as CSV for your reviews
- Security events kept 12 months
GDPR
- Data processing agreement on request
- Export or delete your data from settings
- No data sold, no advertising trackers
What we access
Monitoring uses public data only. Registrar sync is optional and read-only.- Domain names you add
- Stored
- Public WHOIS, SSL and DNS data
- Public
- Registrar domain list and auto-renew
- Read-only
- Registrar payment and transfer actions
- Never
- Your DNS zone edits
- Never
Subprocessors
Every provider is bound by a data processing agreement.Hostinger International Ltd.Infrastructure and backupsEU
ResendAlert and account emailsUnited States
sent.dmSMS alertsUnited States
PolarCard payments and invoicesUnited States
Found a vulnerability?Write to [email protected]. We reply within 48 hours.Privacy policyRequest our DPA