Falkenstein · live
Your website. Your data.
On European soil, under European law.
Managed WordPress and Bedrock hosting, exclusively on EU-owned infrastructure, from an independent European company. Two companies in the chain: us, then Hetzner. Nothing else.
No US parent company. No CLOUD Act exposure on your hosting chain.
Where everything actually is
One country for the servers. One for the backups. One company you deal with.
The part most hosts skip
“The server is in Frankfurt” is not the same as sovereign.
A datacenter location is not a jurisdiction. What matters is who owns your provider.
US law reaches EU servers
Under the US CLOUD Act, American providers must hand over data in their “possession, custody, or control” — regardless of where the server stands. An EU region of a US cloud does not change that.
Microsoft said it under oath
Asked by the French Senate in June 2025 whether it could guarantee European data would never be handed to US authorities, Microsoft France answered: “No, I cannot guarantee it.”
The fix is structural
Choose a hosting chain that is EU-owned end to end — provider, platform, and company — and the structural exposure to US legal process disappears, along with your dependency on fragile EU-US data deals.
What you get
The things a host is actually for, and none of the things it is not.
Staging, with a way back
A copy of your site to break safely, and push-live with a restore point taken first. The rollback is tested, not theoretical.
Backups that get restored
Encrypted before they leave the box, kept in a different datacentre, and one is restored and checked every week. Verification is the part almost nobody offers as a claim.
A shell, scoped to your site
SSH and WP-CLI, in your own namespace and your own cgroup, with keys you install yourself. You cannot see another customer and they cannot see you.
Bring your existing site
Import a WordPress from somewhere else, checked before anything is written. The four ways that normally goes wrong are each refused rather than survived.
Domains, bought here
Search and register through an independent Dutch registrar, with you as the registrant. Not us holding your name on your behalf.
Nothing loaded from anyone else
No CDN, no external fonts, no analytics — on our pages and on yours. Checked on every published page before every deploy, and weekly on each customer site.
How it goes
Three steps. Then it is your website and we are the boring part.
Pick a name
Search it here, or point one you already own. The DNS records you need are on the screen; there is no ticket to open.
Deploy
WordPress or Bedrock, its own system user, its own PHP pool, its own database. Minutes, not a provisioning queue.
Get on with it
Patching, certificates, backups and the restore drill run without you. You get a panel that tells you the truth about all four.
Checked, not asserted
Four promises, each with something that proves it.
A backup you have seen restored
Every week one is restored in full and the database checked, automatically. “We take backups” and “your backup works” are different sentences, and only one of them is testable.
A chain two companies long
Us, then Hetzner. Servers in Falkenstein, backups in Helsinki, domain and DNS with an independent Dutch registrar. Written down, and short enough to read.
Zero third-party resources
Enforced before every deploy across every published page, and on each customer site weekly — by reading what a browser genuinely fetches, not by asking a plugin whether it is switched on.
A way back from every change
Staging with push-live, a restore point taken first, and a rollback that is exercised rather than assumed. Certificates renew and the renewal is proved on a real domain.
Every one of those is a check that runs on a schedule and reports where you can see it — not a line on a features page.
Pricing
Simple plans, honest prices.
Flat pricing. No “introductory” tricks — the price you see is the price you keep.
€35 / month
- Your own server, fully automated
- Daily encrypted backups
- Certificates, renewed and proved
- Panel access
€69 / month
- Everything in Essential
- WordPress kept updated, tested and backed up
- Staging, with push-live and rollback
- Scoped SSH and WP-CLI
from €149 / month
- Everything in Managed
- 24/7 monitored, incident response, SLA
- A data processing agreement
- The sub-processor chain in writing
Response times and cover are agreed in writing, so this one starts with a conversation rather than a card.
For developers & agencies
Bedrock hosting — finally, in Europe.
Composer-based WordPress with Git push-to-deploy, .env configuration and zero-downtime releases. The workflow you love — on a hosting chain your clients’ privacy officers will love too.
Before you move anything
The questions worth asking a host that talks like this.
Is there a GDPR certificate?
No, and nobody has one — there is no such thing as a general GDPR certificate. What there is: a named sub-processor chain two companies long, a data processing agreement, and infrastructure owned by European companies. Anyone selling you a certificate is selling you a logo.
What does “zero third-party resources” actually mean?
That loading a page here makes your browser talk to this domain and nothing else. No fonts from Google, no CDN, no analytics, no avatar service. It is checked on every published page before each deploy, and on every customer site once a week, by reading what a browser would genuinely fetch rather than by asking a plugin whether it is enabled.
Who can reach my server?
There is no SSH key to the production box — not on a laptop, not in a build system. The machine asks for work and reports back, so every path into it starts inside it. There is no key anybody could be compelled to hand over, because there is no key.
Can I leave?
Yes, and taking your site with you is part of the product rather than a favour. Deleting an account exports it first, and the export is in a format our own importer accepts — which is tested, because an archive nothing can read is not a way out.
Is one server not a risk?
It is, and that is stated rather than hidden. Tenants are isolated by system user, PHP pool and database, which bounds the blast radius without removing it. A second machine is on the list; until it exists, this sentence is the accurate one.
Soft launch
Your hosting chain is somebody’s jurisdiction. Pick which.
The platform is real and running. There are no paying customers yet, which is exactly the moment to ask us hard questions.