Trust & Data Protection
You're trusting us with your clients' data. Here's exactly who we are, where that data lives, and what happens to it — in plain language.
Who operates StrataDesk
StrataDesk is built and operated by MICROLAB DIGITAL SRL, a software and IT services company registered in Romania (European Union).
We're not an anonymous SaaS: we run our own IT service business on StrataDesk daily, and the founder personally provisions and onboards every hosted customer.
Where your data lives
Hosted instances run on EU servers — located in Romania (Hostvision) and/or Germany (Hetzner) — operated by MICROLAB DIGITAL SRL. Your data stays in the EU. Each customer gets an isolated deployment: own application containers, own PostgreSQL databases, own file storage.
Prefer full control? StrataDesk can be self-hosted on your own servers or cloud — same Docker-based product, your infrastructure.
Isolation by architecture
Every end-client you manage gets a separate PostgreSQL database — not a row filter in a shared table. A bug or query against one client's data can't touch another's.
The full architecture, including all three isolation tiers, is documented on the security page.
Backups
Because each client has their own database, backups are per client: any single client can be backed up or restored without touching the others.
Backup scheduling, encryption, retention policies, and storage targets (local, S3, Azure Blob, GCS, FTP/SFTP) are built into the product and configurable per instance.
GDPR & data processing
Roles
For hosted instances, you remain the data controller for your clients' and end-users' personal data; MICROLAB DIGITAL SRL acts as a data processor, processing it only to operate your instance.
Data subject requests
Per-client data export and deletion are supported by the architecture itself — a client's database can be exported (standard PostgreSQL dump) or destroyed in its entirety, verifiably.
Data Processing Agreement
Need a signed DPA? Contact us — we'll work with your compliance team's template while our standard DPA is being finalized.
Security questions
Security disclosures and questions: security@stratadesk.io
Subprocessors
Third parties involved in delivering the hosted service:
| Provider | Purpose | Data involved |
|---|---|---|
| Hostvision (RO) / Hetzner (DE) | Data-center infrastructure for hosted customer instances | All instance data, at rest in the EU |
| Mailgun (EU region) | Transactional email (notifications, contact forms) | Email addresses, message content |
| Website hosting provider | Marketing site (stratadesk.io) only | No customer instance data |
Optional per-instance integrations you enable (e.g. S3-compatible backup storage) act on your instructions and your credentials.
If you leave
Your data is yours. On request we hand over standard PostgreSQL dumps of your databases and your uploaded files, then destroy the instance — containers, databases, storage, and backups. No proprietary export formats, no retention you didn't ask for.
Questions we haven't answered here?
Ask Us Directly