Information about CompanyDeskAL infrastructure, data location and international access. This page is publicly accessible without signing in.
Application and database hosting
- Provider
- Hostinger
- Scope
- The application and database, including account, client, employee and appointment data.
- Data centre location
- The exact data centre country must be confirmed in the Hostinger control panel.
The website address and provider headquarters do not establish the physical server location. The data centre selected for production hosting is what matters.
Backups
- Provider
- Cloudflare, Inc. / Cloudflare R2
- Scope
- External backups of system data intended for recovery after an incident.
- Backup jurisdiction
- European Union (
jurisdiction=eu) - Retention period
- 30 days
The EU jurisdiction restriction covers R2 object storage and processing. It differs from a Location Hint, which does not guarantee a location. Cloudflare R2: Data location
International access
Storing backups in the EU does not rule out access from outside the EEA, for example for technical support. Cloudflare, Inc. is a US company.
Provider terms include mechanisms for international transfers, including Standard Contractual Clauses (SCCs) where applicable. Their data processing agreements give further details: Cloudflare DPA, Hostinger DPA.
Protection measures
- Access to application data requires signing in and is limited by account permissions and company membership.
- Account passwords are stored as hashes. Forms use CSRF protection and database queries use parameters.
- Cloudflare documents encryption of R2 data at rest: Cloudflare R2: Data security
External chart library
The application loads Chart.js from cdnjs (Cloudflare). This connection sends technical data, including the IP address and browser information. The global CDN may handle it outside the EEA. Application code does not send client or appointment records to the CDN.
This information page does not load the chart library or external scripts.
Updates and contact
Direct infrastructure and data protection questions to the service provider using the contact channel in your agreement. Update this description when providers, locations or retention rules change. This page supplements, but does not replace, the agreement and data protection documentation.