GDPR Compliance Statement

Backeer MailServer is committed to compliance with the General Data Protection Regulation (GDPR). We act as a Data Processor for the email data hosted on our clients' dedicated instances, and as a Data Controller for our clients' account and billing details.

1. Role as Data Processor

For all corporate email storage, message bodies, attachments, and recipient metadata passing through your dedicated server, you (the Client) are the Data Controller, and Backeer is the Data Processor. We process such data exclusively under your explicit configuration and instruction.

2. Location of Servers and Data Transfers

Our infrastructure operates in ISO 27001-certified European data centers. No client email data is exported outside the European Economic Area (EEA) unless explicitly requested or routed by your own end-users.

3. Security Standards (Article 32 Compliance)

We implement strict technical and organizational safeguards to secure data under GDPR Article 32:

• Encryption: Encrypted SSH system access, TLS 1.3 message transit, and encrypted disk volumes.
• Isolation: Strictly isolated single-tenant environments. No shared storage partitions.
• Resilience: Regular backups, server status checkers, and rapid disaster recovery tools.

4. Data Protection Officer

For questions concerning GDPR compliance, data processing agreements (DPA), or to file a request, please contact our privacy compliance representative at hello@backeer.com.