Vendor profile

Supplier fact sheet.

The facts a procurement team files in a supplier register, in one place. Every line links to the published document it is quoted from.

JSON Plain text

Reviewed 2026-09-09 · Part of the trust centre

Legal identity

Trading name: Veldhost
Legal form: Sole proprietorship (eenmanszaak) under Dutch law — a natural person trading under a registered trade name, not a B.V.
Owner: Janis Berzins
Chamber of Commerce (KvK): 98167820
VAT number: NL005311289B72
Registered office: Piet Heinstraat 12, 7511 JE Enschede, Netherlands
Country of establishment: Netherlands (EU)
Trade name registered: August 2026 (Dutch Chamber of Commerce)
Governing law / venue: Dutch law; competent Dutch courts, without prejudice to mandatory consumer rights

Contacts

Sales & general: info@veldhost.eu
Support: info@veldhost.eu
Security (vulnerabilities, questionnaires, incidents): security@veldhost.eu
Legal, contracts, DPA signature, privacy requests: legal@veldhost.eu
Abuse (AUP): abuse@veldhost.eu
Languages: English, Dutch, Latvian
Support hours: Monday–Friday, Dutch business hours (CET/CEST), excluding Dutch public holidays. No 24/7 staffed support.
First-response targets: General enquiries within one business day; quotes and procurement or security questionnaires within two business days; P1 incidents per plan (SLA §3).

Service & availability

Service: Fully managed EU web hosting: WordPress, PHP, Laravel and static sites with domains, DNS on our own nameservers, email, backups, staging, monitoring, REST API and MCP server.
Commercial availability: Public testing phase — ordering opens 1 October 2026. Evaluation and quotes available now.
Plans: Starter €5/mo · Pro €15/mo · Business from €79/mo (dedicated server, quoted)
Website: https://veldhost.eu
Customer portal: https://manage.veldhost.eu
Status page: https://veldhost.eu/status
API specification: https://manage.veldhost.eu/api/v1/openapi.json (OpenAPI 3.1)

Infrastructure & data residency

Hosting provider: Hetzner Online GmbH (Germany) — servers operated entirely by veldhost
Data locations: Germany: Falkenstein (production), Nuremberg (nightly backup replication). The DPA also permits Hetzner Finland. All EU/EEA.
Data leaves the EU?: No — Customer Content, compute, storage and backups stay in the EU/EEA.
US hyperscaler / CDN in the serving path?: No. Served from our own infrastructure and our own authoritative nameservers.
Tenant isolation: One LXD system container per site; localhost-only databases; container-to-container traffic denied by default.
Sub-processors: Hetzner (DE), Stripe Payments Europe (IE), Openprovider (NL), OpenSRS/Tucows (CA, legacy, domain string only), self-hosted mail. Versioned register in the DPA.

Compliance & certification status

GDPR: Article 28 DPA published and incorporated by reference; countersigned copy on request.
Breach notification: Controller notified within 48 hours of awareness (DPA §10).
NIS2: Measures mapped to the directive; no certification exists for a provider of our size.
ISO/IEC 27001: Not held. Certification is on the public roadmap (later); not implied before a certificate exists.
SOC 2: Not held.
PCI DSS: Card data is handled by Stripe (PCI DSS Level 1); no card data reaches veldhost systems.
Independent penetration test: No published report. Daily automated CVE scanning; responsible-disclosure programme.
Cyber-liability insurance: No certificate published; ask legal@veldhost.eu.
DNSSEC: Available on our nameservers, enabled per domain from the dashboard.

Contractual commitments (quoted)

Availability: Starter best effort · Pro 99.5% monthly target (no credits) · Business 99.9% monthly with credits of 10% / 25% / 50% of the monthly hosting fee, capped at one month, once the dedicated setup is confirmed in the order.
Support first response (P1): Starter 1 business day · Pro 4 business hours · Business 2 business hours.
Backups: Weekly on every plan; daily with 30-day retention on Business or as an add-on; nightly encrypted replication to a second region.
RPO / RTO targets: RPO 7 days (weekly) or 24 hours (daily). RTO 2 business days / 1 business day / 8 business hours (Business). Objectives, not guarantees.
Maintenance window: Sunday 22:00–02:00 CET/CEST, max 2 hours per month; notice 3 / 5 / 7 business days by plan.
Liability cap: Fees paid for the affected service in the preceding 12 months, never below one billing period; negotiable in a Business order form.
Sub-processor changes: At least 14 days’ notice; right to object and terminate the affected service.
Audit rights: Once per 12 months on reasonable notice, or after a breach affecting you.
Data return & deletion: Export of files, database, DNS and mail plus domain transfer codes on termination; deletion of all copies within the export window; 7-year fiscal retention of invoices only.
Cancellation & refunds: Cancel any time, effective end of paid period. 14-day withdrawal with full refund on hosting for consumers and sole traders; domain registrations non-refundable. Pro-rata refund if we terminate for convenience.

Billing

Currency: EUR
Payment: Card via Stripe, monthly or annual. Business orders: written quote and order form; purchase-order references and invoice-based payment discussed per order.
VAT: Dutch VAT; EU business customers with a valid VAT number are reverse-charged (0%).
Invoices: Issued for every charge; listed in the dashboard with PDF download. Purchase-order references on Business orders.

Document library

Terms of Service: Last reviewed 2026-07-03
Privacy Policy: Last reviewed 2026-07-03
Data Processing Agreement: GDPR Art. 28(3), with sub-processor register
Hosting SLA: Availability, support, maintenance, backups, credits
Acceptable Use Policy: Abuse handling and content notices
Security overview: Controls actually in place
Digital sovereignty & NIS2: Residency, register summary, NIS2 mapping
Security questionnaire (pre-answered): Version 1.0, reviewed 2026-09-09
Changelog & roadmap: One entry per production deploy

Not held or not offered

ISO/IEC 27001 certification
SOC 2 report
Independent penetration-test report (published)
Cyber-liability insurance certificate (published)
Single sign-on (SAML / OIDC) for customer accounts
24/7 staffed human support

This fact sheet is generated from the same configuration that prints the imprint on our legal pages, so the entity details here always match the contract. Questions: legal@veldhost.eu.