{ "schema": "veldhost-vendor-profile/1", "reviewed_at": "2026-09-09", "generated_at": "2026-09-11T07:27:02+00:00", "vendor": { "name": "Veldhost", "legal_form": "eenmanszaak", "kvk": "98167820", "vat": "NL005311289B72", "registered_office": "Piet Heinstraat 12, 7511 JE Enschede, Netherlands", "country": "NL", "website": "https://veldhost.eu" }, "not_held": [ "ISO/IEC 27001 certification", "SOC 2 report", "Independent penetration-test report (published)", "Cyber-liability insurance certificate (published)", "Single sign-on (SAML / OIDC) for customer accounts", "24/7 staffed human support" ], "sections": [ { "key": "identity", "title": "Legal identity", "facts": [ { "label": "Trading name", "value": "Veldhost" }, { "label": "Legal form", "value": "Sole proprietorship (eenmanszaak) under Dutch law — a natural person trading under a registered trade name, not a B.V." }, { "label": "Owner", "value": "Janis Berzins" }, { "label": "Chamber of Commerce (KvK)", "value": "98167820" }, { "label": "VAT number", "value": "NL005311289B72" }, { "label": "Registered office", "value": "Piet Heinstraat 12, 7511 JE Enschede, Netherlands" }, { "label": "Country of establishment", "value": "Netherlands (EU)" }, { "label": "Trade name registered", "value": "August 2026 (Dutch Chamber of Commerce)" }, { "label": "Governing law / venue", "value": "Dutch law; competent Dutch courts, without prejudice to mandatory consumer rights", "href": "https://veldhost.eu/terms" } ] }, { "key": "contacts", "title": "Contacts", "facts": [ { "label": "Sales & general", "value": "info@veldhost.eu", "href": "mailto:info@veldhost.eu" }, { "label": "Support", "value": "info@veldhost.eu", "href": "mailto:info@veldhost.eu" }, { "label": "Security (vulnerabilities, questionnaires, incidents)", "value": "security@veldhost.eu", "href": "mailto:security@veldhost.eu" }, { "label": "Legal, contracts, DPA signature, privacy requests", "value": "legal@veldhost.eu", "href": "mailto:legal@veldhost.eu" }, { "label": "Abuse (AUP)", "value": "abuse@veldhost.eu", "href": "mailto:abuse@veldhost.eu" }, { "label": "Languages", "value": "English, Dutch, Latvian" }, { "label": "Support hours", "value": "Monday–Friday, Dutch business hours (CET/CEST), excluding Dutch public holidays. No 24/7 staffed support.", "href": "https://veldhost.eu/sla" }, { "label": "First-response targets", "value": "General enquiries within one business day; quotes and procurement or security questionnaires within two business days; P1 incidents per plan (SLA §3).", "href": "https://veldhost.eu/sla" } ] }, { "key": "service", "title": "Service & availability", "facts": [ { "label": "Service", "value": "Fully managed EU web hosting: WordPress, PHP, Laravel and static sites with domains, DNS on our own nameservers, email, backups, staging, monitoring, REST API and MCP server.", "href": "https://veldhost.eu/platform" }, { "label": "Commercial availability", "value": "Public testing phase — ordering opens 1 October 2026. Evaluation and quotes available now.", "href": "https://veldhost.eu/plans" }, { "label": "Plans", "value": "Starter €5/mo · Pro €15/mo · Business from €79/mo (dedicated server, quoted)", "href": "https://veldhost.eu/plans" }, { "label": "Website", "value": "https://veldhost.eu", "href": "https://veldhost.eu" }, { "label": "Customer portal", "value": "https://manage.veldhost.eu", "href": "https://manage.veldhost.eu" }, { "label": "Status page", "value": "https://veldhost.eu/status", "href": "https://veldhost.eu/status" }, { "label": "API specification", "value": "https://manage.veldhost.eu/api/v1/openapi.json (OpenAPI 3.1)", "href": "https://manage.veldhost.eu/api/v1/openapi.json" } ] }, { "key": "infrastructure", "title": "Infrastructure & data residency", "facts": [ { "label": "Hosting provider", "value": "Hetzner Online GmbH (Germany) — servers operated entirely by veldhost", "href": "https://veldhost.eu/dpa#subprocessors" }, { "label": "Data locations", "value": "Germany: Falkenstein (production), Nuremberg (nightly backup replication). The DPA also permits Hetzner Finland. All EU/EEA.", "href": "https://veldhost.eu/sovereignty" }, { "label": "Data leaves the EU?", "value": "No — Customer Content, compute, storage and backups stay in the EU/EEA.", "href": "https://veldhost.eu/dpa" }, { "label": "US hyperscaler / CDN in the serving path?", "value": "No. Served from our own infrastructure and our own authoritative nameservers.", "href": "https://veldhost.eu/sovereignty" }, { "label": "Tenant isolation", "value": "One LXD system container per site; localhost-only databases; container-to-container traffic denied by default.", "href": "https://veldhost.eu/security" }, { "label": "Sub-processors", "value": "Hetzner (DE), Stripe Payments Europe (IE), Openprovider (NL), OpenSRS/Tucows (CA, legacy, domain string only), self-hosted mail. Versioned register in the DPA.", "href": "https://veldhost.eu/dpa#subprocessors" } ] }, { "key": "compliance", "title": "Compliance & certification status", "facts": [ { "label": "GDPR", "value": "Article 28 DPA published and incorporated by reference; countersigned copy on request.", "href": "https://veldhost.eu/dpa" }, { "label": "Breach notification", "value": "Controller notified within 48 hours of awareness (DPA §10).", "href": "https://veldhost.eu/dpa" }, { "label": "NIS2", "value": "Measures mapped to the directive; no certification exists for a provider of our size.", "href": "https://veldhost.eu/sovereignty" }, { "label": "ISO/IEC 27001", "value": "Not held. Certification is on the public roadmap (later); not implied before a certificate exists.", "href": "https://veldhost.eu/sovereignty" }, { "label": "SOC 2", "value": "Not held.", "href": "https://veldhost.eu/security" }, { "label": "PCI DSS", "value": "Card data is handled by Stripe (PCI DSS Level 1); no card data reaches veldhost systems.", "href": "https://veldhost.eu/privacy" }, { "label": "Independent penetration test", "value": "No published report. Daily automated CVE scanning; responsible-disclosure programme.", "href": "https://veldhost.eu/security" }, { "label": "Cyber-liability insurance", "value": "No certificate published; ask legal@veldhost.eu." }, { "label": "DNSSEC", "value": "Available on our nameservers, enabled per domain from the dashboard.", "href": "https://veldhost.eu/security" } ] }, { "key": "commitments", "title": "Contractual commitments (quoted)", "facts": [ { "label": "Availability", "value": "Starter best effort · Pro 99.5% monthly target (no credits) · Business 99.9% monthly with credits of 10% / 25% / 50% of the monthly hosting fee, capped at one month, once the dedicated setup is confirmed in the order.", "href": "https://veldhost.eu/sla" }, { "label": "Support first response (P1)", "value": "Starter 1 business day · Pro 4 business hours · Business 2 business hours.", "href": "https://veldhost.eu/sla" }, { "label": "Backups", "value": "Weekly on every plan; daily with 30-day retention on Business or as an add-on; nightly encrypted replication to a second region.", "href": "https://veldhost.eu/sla" }, { "label": "RPO / RTO targets", "value": "RPO 7 days (weekly) or 24 hours (daily). RTO 2 business days / 1 business day / 8 business hours (Business). Objectives, not guarantees.", "href": "https://veldhost.eu/sla" }, { "label": "Maintenance window", "value": "Sunday 22:00–02:00 CET/CEST, max 2 hours per month; notice 3 / 5 / 7 business days by plan.", "href": "https://veldhost.eu/sla" }, { "label": "Liability cap", "value": "Fees paid for the affected service in the preceding 12 months, never below one billing period; negotiable in a Business order form.", "href": "https://veldhost.eu/terms" }, { "label": "Sub-processor changes", "value": "At least 14 days’ notice; right to object and terminate the affected service.", "href": "https://veldhost.eu/dpa" }, { "label": "Audit rights", "value": "Once per 12 months on reasonable notice, or after a breach affecting you.", "href": "https://veldhost.eu/dpa" }, { "label": "Data return & deletion", "value": "Export of files, database, DNS and mail plus domain transfer codes on termination; deletion of all copies within the export window; 7-year fiscal retention of invoices only.", "href": "https://veldhost.eu/dpa" }, { "label": "Cancellation & refunds", "value": "Cancel any time, effective end of paid period. 14-day withdrawal with full refund on hosting for consumers and sole traders; domain registrations non-refundable. Pro-rata refund if we terminate for convenience.", "href": "https://veldhost.eu/terms" } ] }, { "key": "commercial", "title": "Billing", "facts": [ { "label": "Currency", "value": "EUR" }, { "label": "Payment", "value": "Card via Stripe, monthly or annual. Business orders: written quote and order form; purchase-order references and invoice-based payment discussed per order.", "href": "https://veldhost.eu/business" }, { "label": "VAT", "value": "Dutch VAT; EU business customers with a valid VAT number are reverse-charged (0%).", "href": "https://veldhost.eu/plans" }, { "label": "Invoices", "value": "Issued for every charge; listed in the dashboard with PDF download. Purchase-order references on Business orders.", "href": "https://veldhost.eu/docs/billing-and-plans" } ] }, { "key": "documents", "title": "Document library", "facts": [ { "label": "Terms of Service", "value": "Last reviewed 2026-07-03", "href": "https://veldhost.eu/terms" }, { "label": "Privacy Policy", "value": "Last reviewed 2026-07-03", "href": "https://veldhost.eu/privacy" }, { "label": "Data Processing Agreement", "value": "GDPR Art. 28(3), with sub-processor register", "href": "https://veldhost.eu/dpa" }, { "label": "Hosting SLA", "value": "Availability, support, maintenance, backups, credits", "href": "https://veldhost.eu/sla" }, { "label": "Acceptable Use Policy", "value": "Abuse handling and content notices", "href": "https://veldhost.eu/aup" }, { "label": "Security overview", "value": "Controls actually in place", "href": "https://veldhost.eu/security" }, { "label": "Digital sovereignty & NIS2", "value": "Residency, register summary, NIS2 mapping", "href": "https://veldhost.eu/sovereignty" }, { "label": "Security questionnaire (pre-answered)", "value": "Version 1.0, reviewed 2026-09-09", "href": "https://veldhost.eu/trust/security-questionnaire" }, { "label": "Changelog & roadmap", "value": "One entry per production deploy", "href": "https://veldhost.eu/changelog" } ] } ], "links": { "trust_centre": "https://veldhost.eu/trust", "vendor_profile": "https://veldhost.eu/trust/vendor-profile", "security_questionnaire": "https://veldhost.eu/trust/security-questionnaire", "security_questionnaire_text": "https://veldhost.eu/trust/security-questionnaire.txt", "dpa": "https://veldhost.eu/dpa", "sla": "https://veldhost.eu/sla", "terms": "https://veldhost.eu/terms", "privacy": "https://veldhost.eu/privacy", "status": "https://veldhost.eu/status" } }