Cookies ahead

Our support chat tool "Intercom" would like to collect some more data on you. See the related link for more details.

Docs

🤝

Trust

fortrabbit is a German company for an international audience. We subscribe to transparency.

A German company

fortrabbit is a GmbH registered in Berlin, Germany. The contracting party is a German company, and contracts are governed by German and European law.

Here for the long run

fortrabbit has operated since 2012, owned and run by the same independent German company. We grow slowly and on our own terms, and we plan to be here for the long run.

GDPR

The data processing agreement (DPA) is part of the terms of service and applies automatically. It covers personal data processed on the platform and meets GDPR requirements.

Regions

Each app runs in the data center region chosen when it is created. The EU region is in Ireland: an app placed there runs, together with its database, in the EU. A US region is also available. Account and billing data is stored in Ireland.

Sub-processors

We choose sub-processors carefully and keep the list as short as possible. The ones that remain are needed to run the platform — payment, support chat, transactional e-mail, error monitoring. Every sub-processor is listed and assessed for GDPR compliance.

Infrastructure

fortrabbit is a public cloud. We develop software to run hosting, but do not own the infra, which runs on Amazon Web Services. What fortrabbit provides is a German contracting party, GDPR terms by default, an EU region for the app, and a public list of every sub-processor.

A managed platform

The platform is run by people, not left to autopilot — patched, monitored and staffed on call. We secure the infrastructure and the stack; securing the application on top stays with its developer.

All our legal documents in one place.

Frequently asked

Is fortrabbit GDPR compliant?
Yes

Yes - The data processing agreement is part of the terms of service and applies automatically — there is nothing separate to sign. Sub-processors are documented and assessed for GDPR compliance.

#
Where is the data stored?
It depends

It depends - Each app runs in the region chosen at creation. The EU region is in Ireland; a US region is also available. Account and billing data is stored in Ireland. Some data is handled by sub-processors, several of them US companies — the full list is public.

#
Is this a sovereign cloud?
No

No - The infrastructure runs on AWS, a US-owned provider, and several sub-processors are US companies, so the US CLOUD Act can apply. What fortrabbit offers is a German contracting party, GDPR terms by default, an EU region for the app, and transparency about the rest.

#
Is the platform monitored?
Yes

Yes - The platform is run by people, not left to autopilot — patched, monitored and staffed on call around the clock. Securing the infrastructure and the stack is part of the service; securing the application on top stays with its developer.

#
Can the service be cancelled at any time?
Yes

Yes - Cancellation runs through the dashboard and takes effect immediately. There is no lock-in and no long-term contract.

#