Enterprise & teams
Your account and monitoring data is stored in the EU (Helsinki); monitoring workers receive only public URLs. GDPR + DPA, annual invoicing, and a subprocessor list you can read before signing. Self-serve for the rest.
SLA
- Uptime commitment
- 99.9% monthly uptime on the monitoring API and dashboard.
- Remedy
- If uptime falls below 99.9% in a calendar month, we double all account balances. No claim form, no ticket. Automatic.
- Binding terms
- See Terms §5 for binding terms. This page is a plain-language summary.
Data & location
Account and monitoring data is stored in the EU (Helsinki). Monitoring workers run from EU and Canadian locations. Workers receive only the public URLs to check and a pseudonymous identifier, never names, emails, credentials, or monitoring history. Workers store no user data.
GDPR & DPA
We are GDPR-compliant; see our Privacy Policy. A Data Processing Agreement (DPA) is available; email agne@gijahub.com to request it.
Annual invoicing
Available for teams. Email agne@gijahub.com to arrange invoicing that fits your procurement cycle.
Subprocessors
The complete list. Read it before signing: nothing else lurks in the stack.
| Subprocessor | Purpose | Region | Note |
|---|---|---|---|
| Hetzner | Hosting, database, Redis | EU: Helsinki, Finland | |
| OVH | Hosting & monitoring worker | EU: Gravelines, France | |
| Monitoring worker (Montreal) | Monitoring execution from Canada | Canada: Montreal | Monitoring worker: receives public URLs and a pseudonymous ID; stores no user data |
| Brevo | Transactional email | EU: France | |
| Stripe | Payment processing | United States (PCI-DSS certified processor) | We never store card data |
| Optional OAuth sign-in | EU/US | Authentication only: no monitoring data shared | |
| Plausible Analytics | Privacy-friendly analytics | Self-hosted: EU (Helsinki) | Not a third-party subprocessor |
Security facts
- TLS in transit on all traffic
- Encryption at rest where applicable
- No card storage; payments go through Stripe
- Self-hosted proof-of-work CAPTCHA on login, registration, and password reset (no third-party, no cookies)
- Self-hosted Plausible analytics — no cookies, no tracking of personal data
- Public Uptime Kuma status page: kuma.gijahub.com/status/notiduck
Not currently SOC 2 or ISO 27001 certified; the security facts above are the complete picture.
Questions about the SLA, DPA, or invoicing? Contact sales. Everything else you can self-serve.