VELDHOST — VENDOR PROFILE Reviewed 2026-09-09 · https://veldhost.eu/trust/vendor-profile LEGAL IDENTITY -------------- Trading name: Veldhost Legal form: Sole proprietorship (eenmanszaak) under Dutch law — a natural person trading under a registered trade name, not a B.V. Owner: Janis Berzins Chamber of Commerce (KvK): 98167820 VAT number: NL005311289B72 Registered office: Piet Heinstraat 12, 7511 JE Enschede, Netherlands Country of establishment: Netherlands (EU) Trade name registered: August 2026 (Dutch Chamber of Commerce) Governing law / venue: Dutch law; competent Dutch courts, without prejudice to mandatory consumer rights see https://veldhost.eu/terms CONTACTS -------- Sales & general: info@veldhost.eu Support: info@veldhost.eu Security (vulnerabilities, questionnaires, incidents): security@veldhost.eu Legal, contracts, DPA signature, privacy requests: legal@veldhost.eu Abuse (AUP): abuse@veldhost.eu Languages: English, Dutch, Latvian Support hours: Monday–Friday, Dutch business hours (CET/CEST), excluding Dutch public holidays. No 24/7 staffed support. see https://veldhost.eu/sla First-response targets: General enquiries within one business day; quotes and procurement or security questionnaires within two business days; P1 incidents per plan (SLA §3). see https://veldhost.eu/sla SERVICE & AVAILABILITY ---------------------- Service: Fully managed EU web hosting: WordPress, PHP, Laravel and static sites with domains, DNS on our own nameservers, email, backups, staging, monitoring, REST API and MCP server. see https://veldhost.eu/platform Commercial availability: Public testing phase — ordering opens 1 October 2026. Evaluation and quotes available now. see https://veldhost.eu/plans Plans: Starter €5/mo · Pro €15/mo · Business from €79/mo (dedicated server, quoted) see https://veldhost.eu/plans Website: https://veldhost.eu see https://veldhost.eu Customer portal: https://manage.veldhost.eu see https://manage.veldhost.eu Status page: https://veldhost.eu/status see https://veldhost.eu/status API specification: https://manage.veldhost.eu/api/v1/openapi.json (OpenAPI 3.1) see https://manage.veldhost.eu/api/v1/openapi.json INFRASTRUCTURE & DATA RESIDENCY ------------------------------- Hosting provider: Hetzner Online GmbH (Germany) — servers operated entirely by veldhost see https://veldhost.eu/dpa#subprocessors Data locations: Germany: Falkenstein (production), Nuremberg (nightly backup replication). The DPA also permits Hetzner Finland. All EU/EEA. see https://veldhost.eu/sovereignty Data leaves the EU?: No — Customer Content, compute, storage and backups stay in the EU/EEA. see https://veldhost.eu/dpa US hyperscaler / CDN in the serving path?: No. Served from our own infrastructure and our own authoritative nameservers. see https://veldhost.eu/sovereignty Tenant isolation: One LXD system container per site; localhost-only databases; container-to-container traffic denied by default. see https://veldhost.eu/security Sub-processors: Hetzner (DE), Stripe Payments Europe (IE), Openprovider (NL), OpenSRS/Tucows (CA, legacy, domain string only), self-hosted mail. Versioned register in the DPA. see https://veldhost.eu/dpa#subprocessors COMPLIANCE & CERTIFICATION STATUS --------------------------------- GDPR: Article 28 DPA published and incorporated by reference; countersigned copy on request. see https://veldhost.eu/dpa Breach notification: Controller notified within 48 hours of awareness (DPA §10). see https://veldhost.eu/dpa NIS2: Measures mapped to the directive; no certification exists for a provider of our size. see https://veldhost.eu/sovereignty ISO/IEC 27001: Not held. Certification is on the public roadmap (later); not implied before a certificate exists. see https://veldhost.eu/sovereignty SOC 2: Not held. see https://veldhost.eu/security PCI DSS: Card data is handled by Stripe (PCI DSS Level 1); no card data reaches veldhost systems. see https://veldhost.eu/privacy Independent penetration test: No published report. Daily automated CVE scanning; responsible-disclosure programme. see https://veldhost.eu/security Cyber-liability insurance: No certificate published; ask legal@veldhost.eu. DNSSEC: Available on our nameservers, enabled per domain from the dashboard. see https://veldhost.eu/security CONTRACTUAL COMMITMENTS (QUOTED) -------------------------------- Availability: Starter best effort · Pro 99.5% monthly target (no credits) · Business 99.9% monthly with credits of 10% / 25% / 50% of the monthly hosting fee, capped at one month, once the dedicated setup is confirmed in the order. see https://veldhost.eu/sla Support first response (P1): Starter 1 business day · Pro 4 business hours · Business 2 business hours. see https://veldhost.eu/sla Backups: Weekly on every plan; daily with 30-day retention on Business or as an add-on; nightly encrypted replication to a second region. see https://veldhost.eu/sla RPO / RTO targets: RPO 7 days (weekly) or 24 hours (daily). RTO 2 business days / 1 business day / 8 business hours (Business). Objectives, not guarantees. see https://veldhost.eu/sla Maintenance window: Sunday 22:00–02:00 CET/CEST, max 2 hours per month; notice 3 / 5 / 7 business days by plan. see https://veldhost.eu/sla Liability cap: Fees paid for the affected service in the preceding 12 months, never below one billing period; negotiable in a Business order form. see https://veldhost.eu/terms Sub-processor changes: At least 14 days’ notice; right to object and terminate the affected service. see https://veldhost.eu/dpa Audit rights: Once per 12 months on reasonable notice, or after a breach affecting you. see https://veldhost.eu/dpa Data return & deletion: Export of files, database, DNS and mail plus domain transfer codes on termination; deletion of all copies within the export window; 7-year fiscal retention of invoices only. see https://veldhost.eu/dpa Cancellation & refunds: Cancel any time, effective end of paid period. 14-day withdrawal with full refund on hosting for consumers and sole traders; domain registrations non-refundable. Pro-rata refund if we terminate for convenience. see https://veldhost.eu/terms BILLING ------- Currency: EUR Payment: Card via Stripe, monthly or annual. Business orders: written quote and order form; purchase-order references and invoice-based payment discussed per order. see https://veldhost.eu/business VAT: Dutch VAT; EU business customers with a valid VAT number are reverse-charged (0%). see https://veldhost.eu/plans Invoices: Issued for every charge; listed in the dashboard with PDF download. Purchase-order references on Business orders. see https://veldhost.eu/docs/billing-and-plans DOCUMENT LIBRARY ---------------- Terms of Service: Last reviewed 2026-07-03 see https://veldhost.eu/terms Privacy Policy: Last reviewed 2026-07-03 see https://veldhost.eu/privacy Data Processing Agreement: GDPR Art. 28(3), with sub-processor register see https://veldhost.eu/dpa Hosting SLA: Availability, support, maintenance, backups, credits see https://veldhost.eu/sla Acceptable Use Policy: Abuse handling and content notices see https://veldhost.eu/aup Security overview: Controls actually in place see https://veldhost.eu/security Digital sovereignty & NIS2: Residency, register summary, NIS2 mapping see https://veldhost.eu/sovereignty Security questionnaire (pre-answered): Version 1.0, reviewed 2026-09-09 see https://veldhost.eu/trust/security-questionnaire Changelog & roadmap: One entry per production deploy see https://veldhost.eu/changelog NOT HELD / NOT OFFERED ---------------------- - ISO/IEC 27001 certification - SOC 2 report - Independent penetration-test report (published) - Cyber-liability insurance certificate (published) - Single sign-on (SAML / OIDC) for customer accounts - 24/7 staffed human support