Technical and organisational measures
How we protect the data you entrust to us, under Article 32 of the GDPR.
These technical and organisational measures describe how Euclid Services Ltd, trading as EuroVPS, protects personal data processed on the services we provide: dedicated servers, private cloud, storage, backup and disaster recovery, network and firewall services, and the platforms we manage for our customers. The full document is provided on request to customers, their auditors and their data protection officers.
At a glance
Independently certified.
ISO/IEC 27001 (with ISO/IEC 27017 and ISO/IEC 27018), ISO 9001, ISO 14001 and ISO 37001, issued by an accredited certification body and audited every year.
Our own infrastructure.
Customer services run on servers, storage, network and backup systems that we own, in our own cages at Digital Realty in Athens and Amsterdam, and in Toronto. Customers who require EU-only processing are deployed in Athens or Amsterdam. No customer personal data is processed on public cloud platforms.
Physical security.
Professionally operated, independently audited datacenters with controlled, logged access and round-the-clock security.
Access control.
Multi-factor authentication and keys-only administrative access, through our own gateways, on an air-gapped management network.
Encryption.
Encryption at rest by default and encrypted links between our sites.
Backups.
Pull-only backups over the out-of-band network, offline copies on tape, and restores tested as often as weekly.
Secure disposal.
Every drive that leaves service is sanitised with Blancco, with an erasure certificate kept for each one.
Change and incident management.
Written runbooks, a backup before every change, and engineers on call around the clock.