FairSSL's systems are hosted in the EU
The websites, control panel, API, ACME server and database run in the EU, and so do the services we use for payments, banking, accounting, support and email. This page shows where each part runs.
Where the systems run
The websites, control panel, API, ACME server and database run at Amazon Web Services EMEA SARL in the AWS region eu-central-1 (Frankfurt, Germany). Encrypted database backups are stored in eu-north-1 (Stockholm, Sweden).
The suppliers behind the service, both those that process customer data and those we use in our own business.
| Supplier | Service for FairSSL | Where data is stored and processed | Transfer basis |
|---|---|---|---|
| UpCloud Ltd (Finland) | From 11 November 2026: hosting of websites, control panel, API, ACME server and database | EU (Copenhagen and Amsterdam) | EU |
| mailbox.org (Heinlein Hosting GmbH, Germany) | From 11 November 2026: email | Germany | EU |
| OVHcloud (OVH SAS, France) | From 11 November 2026: locked backups and encryption key management | France | EU |
| Lettermint B.V. (Netherlands) | Automated system emails | EU | EU |
| Amazon Web Services EMEA SARL (Luxembourg) | Hosting of websites, control panel, API, ACME server and database; AWS WAF; log files in Amazon S3 | eu-central-1 (Frankfurt); database backups in eu-north-1 (Stockholm) | EU; DPF and SCC for the group in the USA |
| Microsoft 365 and Azure | Office and cloud infrastructure | EU (Ireland and the Netherlands) | DPF and SCC |
| Freshdesk (Freshworks Inc., USA) | Helpdesk | AWS Frankfurt | DPF |
| Postmark (AC PM LLC, USA) | Automated system emails; not used for new emails since 30 October 2026 | USA | DPF and SCC |
| Scanpay ApS (DK) | Payment gateway | EU | EU |
| Clearhaus A/S and Nets A/S (DK) | Card payment acquiring | EU | EU |
| Nordea Bank (DK) and Handelsbanken (SE) | Bank transfers | EU | EU |
| Visma e-conomic A/S (DK) | Accounting and billing | EU | EU |
| Enable Banking Oy (FI) | Bank reconciliation (PSD2) | EU | EU |
| Google Ireland Limited (IE) | Google Analytics and Google Ads on the website, not in the API or ACME server | EU/EEA | DPF for Google LLC |
| Umami (self-hosted by FairSSL) | Website visitor statistics without cookies, hosted at UpCloud Ltd (Finland) in Copenhagen | EU | EU |
| consent.studio (Vallonic B.V., Netherlands) | Cookie consent on the website | EU | EU |
| BunnyWay d.o.o. (Slovenia) | From 11 November 2026: CDN for static files on websites and control panel | EU | EU |
The certificate authorities
A certificate is issued by the CA behind the product you choose. The CA validates your details and issues the certificate under the CA/Browser Forum rules, so the details needed for validation are processed by that CA. This applies to everyone who sells certificates from the same CAs.
| Supplier | Service for FairSSL | Where data is stored and processed | Transfer basis |
|---|---|---|---|
| DigiCert, Inc. (USA) | CA: validation and issuance | USA | DPF |
| GMO GlobalSign NV (Belgium) and GMO GlobalSign Ltd (UK) | CA: validation and issuance | Belgium and the United Kingdom | EU; UK adequacy; SCC within the group |
| Sectigo Limited (UK) and Sectigo, Inc. (USA) | CA: validation and issuance | United Kingdom and USA | UK adequacy; DPF and SCC |
What we are working on
We are actively working to move operational and business systems hosted or owned outside the EU to services both hosted and owned in the EU. The certificate authorities (CAs) depend on the chosen product and are not part of the move.
A Danish SSL company since 2010
FairSSL A/S is a Danish company based in Ørum Djurs, company registration (CVR) 33075782. We have sold SSL certificates since 2010 and are not owned by or tied to any CA.