Linux servers, run in Europe.

Containers, one sign-in service, a mail server of our own and encrypted backups every night, on Linux servers we run ourselves.

The challenge

If nobody in the chain can say which server the data is on, nobody can say who reaches it.

Much of what a company runs is rented through several layers of providers. Each layer adds a contract, a jurisdiction and a set of keys held by someone else.

Cartaia runs on Linux servers we set up and operate ourselves in Nuremberg, with backups in Helsinki. We know every container on them and every version it runs.

What we deliver.

Run every service in Docker containers, pinned to exact versions.
Connect BankID and Microsoft accounts to one sign-in service built on Keycloak.
Operate our own mail server with DKIM signing and a strict DMARC policy.
Encrypt databases, files and mail every night and send them to our own storage in another data centre.
Restore the database to a point in time as a test every week.

How it works.

Build: Servers are described in code, so every one can be rebuilt the same way.
Run: We patch, take encrypted copies every night and test the restore every week.
Harden: We scan for vulnerabilities and close what we find across the portfolio.

Three levels of service.

Standard: The foundation: the platform has an owner. Patching, encrypted backups and restore tests. User and permission changes on request.
Extended: For platforms that carry more of the business. Everything in Standard. A higher level of service, with the terms set in the agreement.
Premium: For platforms that cannot stop. Everything in Extended. Available 24/7, every day of the year. Response within 30 minutes.

Behind it.

Cartaia Digital workplace