Infrastructure

EU-Hosted Infrastructure

Hetzner Data Centre, Helsinki

All data is hosted by Hetzner, a German company, in their Helsinki, Finland data centre — fully within the EU.

100% EU-Based Infrastructure

No data leaves the European Union. All processing, storage, and backups remain within EU borders.

Self-Hosted Servers

We run our own servers — no reliance on third-party cloud providers such as AWS, Google Cloud, or Azure.

Full Data Pipeline Control

From field data collection to long-term storage, the entire pipeline is managed by Reef Support infrastructure.

Regulation

GDPR Compliance

Netherlands-Registered Company

Reef Support B.V. is a registered Dutch company, subject to EU law and the Dutch Data Protection Authority.

Full GDPR Compliance

We are fully compliant with the EU General Data Protection Regulation (GDPR) across all platforms and services.

Data Controller

Data controller: Reef Support B.V., Herengracht 551, Amsterdam, the Netherlands.

Your Data Rights

Exercise your right to access, rectify, erase, port, and object to the processing of your personal data at any time.

Cookie Consent Management

Cookie consent is managed transparently across all platforms, giving you full control over tracking preferences.

Data Processing Agreements

Data Processing Agreements (DPAs) are available for institutional and enterprise partners upon request.

Your Data

Data Ownership & Export

You Own Your Data

Users own their survey and monitoring data. Reef Support does not claim ownership of any data you collect.

Full Data Export

Export your data in standard formats including CSV, GeoJSON, and PDF reports at any time.

API Access

Retrieve your data programmatically via our documented REST API for integration with your own systems.

Data Deletion on Request

Request complete deletion of your data from all systems, including backups, at any time.

Security

Platform Security

JWT Authentication

Secure JSON Web Token-based authentication with automatic token rotation and session management.

Role-Based Access Control

Granular RBAC for organisations and projects, ensuring users only access what they are authorised to see.

TLS/SSL Encryption

All data in transit is encrypted with TLS/SSL, protecting communication between your browser and our servers.

Encrypted Storage

Sensitive data at rest is encrypted, providing an additional layer of protection for stored information.

Security Audits & Updates

Regular security audits, penetration testing, and dependency updates keep the platform protected against emerging threats.

Review Our Legal Documents

Read our full Privacy Policy and Terms & Conditions for complete details on how we handle and protect your data.

Security & GDPR Compliance