Krafteq Cloud — EU-Hosted Business Software, €250 / Year per Software (First Year Included)

€250 / year per software on the standard plan for typical small business applications with 1–20 users, low data volume, and normal load. The first year after go-live is included — from year 2 onwards, annual prepayment of €250 per software. Included in the price: EU hosting, security patches, daily backups, monitoring, Krafteq support, maintenance, GDPR-compliant operations with DPA (Krafteq as data processor), TLS, a custom domain, and best-effort support. Higher tiers — for more users, greater load, or special backup requirements — are calculated transparently in an initial consultation.

Deliberately excluded are: 24/7 on-call cover, guaranteed SLAs with penalties, high-frequency scaling for traffic spikes, and third-party compliance audits (such as PCI-DSS or ISO 27001 for your own software). Also not included are further development of your software (a separate engagement) and data migration from third-party systems. 24/7 support is available on request as an add-on.

Your software continues to run — on any other host. Source code is held in your repository from Sprint 1, software runs in standard Docker containers, and there is no proprietary cloud API. You can migrate at any time to another EU host, AWS, Azure, or a local provider. Database dumps and file storage archives are available on request in standard formats (PostgreSQL dump, ZIP).

On request via the Customer Portal or by e-mail. You receive a current database dump (typically PostgreSQL) along with an archive of all uploaded files. Optionally, we can integrate a self-service export button directly into your software. Upon cancellation, you have 30 days to export all your data — after which deletion takes place.

Yes, at any time — and it is an equally valid option. Krafteq Cloud is optional. If you already have an in-house IT team or an IT provider, we hand over the source code (held in your repository from Sprint 1) and the container build definition (Dockerfile + Compose file). You or your provider deploy independently to an EU host, AWS, Azure, or a local provider. In that scenario, GDPR data processing responsibility lies with you or your provider, not with Krafteq. Krafteq Cloud is an offer, not a constraint — the economic advantage arises from the bundled operations model, not from vendor lock-in.

3 months to quarter-end. After giving notice, you have 30 days to export all your data, after which the data is deleted in accordance with GDPR. You may cancel Krafteq Cloud independently of any further development agreement — the hosting is not tied to follow-on orders.

Regular patches are applied during off-peak hours — typically overnight or at weekends, without any noticeable downtime. Larger updates are announced in advance via the Customer Portal. For critical security vulnerabilities, we patch outside maintenance windows to protect your software.

ISO 27001 certification in progress — currently in the gap analysis phase, target Q1 2027. We already practise the essential controls today: code review on every change, automated CI/CD with security scans, secrets management with HashiCorp Vault, SBOM generation, vulnerability scanning on every container, and internal access only via MFA and bastion hosts.

Yes, as standard — provided you choose Krafteq Cloud. In that case Krafteq acts as data processor under Art. 28 GDPR; the DPA (AVV) is part of the Krafteq Cloud contract and you receive it via the Customer Portal as a signed PDF. We can adapt it on request — for example, if your own ISMS has differing requirements. If you self-host, or have your IT provider host the software, data processing responsibility lies there, not with Krafteq.

There are three cases we actively advise against: applications requiring a guaranteed 99.99% SLA with penalties (better suited to an enterprise tier or a specialist host), applications with high-frequency scaling beyond 50,000 users or real-time streaming (a dedicated architecture workshop is required), and applications with data residency requirements outside the EU (a service we do not provide). If you are unsure, we will clarify this in an initial consultation.