Is Yundera GDPR compliant?
Yundera's architecture is fundamentally aligned with data sovereignty principles, including GDPR.
Your data stays on your machine
The core principle: all application data is stored locally on your PCS, at your physical location. Yundera's servers never store your personal data, files, photos, documents, or credentials.
This means:
- You are the data controller — you decide what data is stored and who can access it
- Data residency — your data physically stays in your country/region
- No third-party data processing — Yundera doesn't process your application data
What Yundera infrastructure handles
| Data | Where | Purpose |
|---|---|---|
| App data, files, databases | Your PCS (local) | Application functionality |
| Domain routing metadata | NSL.SH infrastructure | DNS resolution and certificate provisioning |
| Tunnel traffic (if behind CGNAT) | Encrypted in transit via WireGuard | Network reachability |
The routing metadata is limited to domain names and IP addresses — no application-level data.
For businesses
If you're using Yundera for business purposes:
- Data stays in your jurisdiction — no cross-border data transfers for app data
- You control access — AppShield SSO and per-app authentication
- You control retention — delete data anytime by removing it from your PCS
- Auditability — full SSH access to inspect what's running and stored
Company location
Aptero (the company behind Yundera) is headquartered in Paris, France and operates under French and EU law.