ondonne ondonne

Trust

Our approach to security.

Every point below is verifiable. We prefer to say what is not there rather than inflate what is.

ondonne is not SOC 2 or ISO 27001 certified in its own name. GCP is, which covers the underlying infrastructure, but not our application. We don't publish an uptime percentage until we can commit to one contractually.

  • Hosting

    Google Cloud europe-west1 (Belgium). No data leaves the EU.

  • Sovereignty

    Listed subprocessors: GCP, Stripe, Powens, SendGrid, Cloudflare Turnstile. No transfer outside the EU without an explicit legal basis.

  • Zonal, not high availability

    Our pilot beta runs zonal, not multi-zone. We prefer to say so clearly during this phase.

  • Encryption

    TLS in transit, at-rest encryption with customer-managed keys (CMEK) for sensitive data.

  • Authentication

    Admin accounts protected by mandatory TOTP MFA. Workload Identity Federation between services, no shared service-account key.

  • Backups

    CloudSQL PITR 7 days + 14 daily backups. GCS bucket with versioning.

A detailed security policy and DPA (data processing agreement) are provided on request by email.