GoSec is a European sovereign cloud with a generative interface. You describe the system you need. It composes the architecture, quotes the price, and shows you the health of the regions that will run it.
Three regions — Helsinki, Falkenstein and Nuremberg — connected over private fibre. mTLS end to end. Identity, KMS and storage operated by us in the EU, under EU law, on Hetzner cloud and dedicated servers.
Three tenets · what GoSec means by sovereign
“Sovereignty isn't a sticker. It's the shape of every contract, every region map, every cipher key in the cluster. We don't borrow it from a marketing site — we build it into the operator manual.”
GoSec rents cloud and dedicated servers from Hetzner Online in Helsinki, Falkenstein and Nuremberg. We operate every layer above the rented hardware — hypervisor, identity, storage, network. The kit is German and Finnish; the operators are us.
Owned and operated by a German entity, under German and EU law. No CLOUD Act exposure. No FISA-702 exposure. Subpoenas go through European courts or they don't go anywhere.
FreeIPA realm per customer, Keycloak federation, OpenBao KMS with customer-held root keys. Data residency is a property of the workload — declared, enforced, audited.
Helsinki · Falkenstein · Nuremberg — on Hetzner cloud + dedicated
GoSec runs across three Hetzner-hosted EU datacentres. Helsinki anchors the north; Falkenstein and Nuremberg anchor central Europe with sub-10ms inter-link. Every region holds a full copy of identity, KMS and storage — your workloads survive any one site going dark.
Twelve building blocks — one identity, one KMS, one storage
Composable services that share one identity layer, one key management layer, one storage layer. Pick what you need; the rest stay quiet but stay close. Everything below speaks mTLS and lives in the EU.
Published — the same numbers the console quotes
Everything you need in one package — save up to 40% compared to individual products.
Core productivity for small teams
Full suite for growing organisations
Complete platform with dedicated support
Match the encryption posture to your security and compliance requirements. Tier 1 ships with every plan.
We manage encryption keys using industry-standard HSMs. Simple and secure.
Best for Teams who want security without complexity
Bring your own key — you own the keys and delegate access to GoSec. Revoke anytime.
Best for Organisations with compliance requirements
You control all keys via your own HSM or KMS. We only ever see encrypted data.
Best for Regulated industries and government
Response times below cover severity-1 (service down) issues. Lower severities have proportionally longer SLAs.
Email support with next business day response
Best for Small teams with flexible timelines
Fast response with dedicated queue and phone support
Best for Growing organisations needing reliability
Mission-critical support with 24/7 coverage
Best for Mission-critical operations
Prefer flexibility? Choose individual products and pay only for what you use.
Migrate from Microsoft 365 with zero data loss
Expand your team's storage capacity
Keep data beyond the included 12-month retention period for compliance or archival
Join the waitlist for early access and launch-day pricing.
Launching Q3 2026. Waitlist members get priority onboarding.
GDPR · DORA · ISO 27001 · NIS2 — EU-only data path
We don't process your data outside the EU. Not for analytics. Not for backup. Not at all.
Scroll back to the console and describe what you want to host. GoSec will quote it, draw it, and show you the regions that will run it. If you'd rather talk to a human first, we can do that too — but the cloud is happy to start.