What you get
EU residency by default
Hosted in France (Paris). Your data stays there. Full stop.
Built for the GDPR
DPA, current subprocessor list, one-click GDPR erasure, and full data export — first-class, not afterthoughts.
Audit-ready
Tamper-evident logs of every sign-in and change, exportable when you need them. SIEM streaming is on the roadmap.
One region. It stays there.
Hosted in France (Paris). Every byte of identity data and every audit log lives in that EU region — provably, not by promise.
Open the live demoPick once. Verify forever.
One region, from day one
France (Paris) — shown read-only in your dashboard from day one. There is no region picker to misconfigure.
Everything stays in-region
Sessions, profiles, credentials and audit logs live and are processed in that region — not mirrored to another jurisdiction for convenience.
Check us whenever you like
Inspect a decoded token, pull your export, watch the requests your app makes. Sovereignty here is a property you can test, not a paragraph in a brochure.
Sovereignty you can verify yourself.
Claims are cheap in this category. These are the ones you can check from your own browser and API calls.
Zero third parties on our pages
No third-party fonts, CDNs, analytics or trackers. Open the network tab: your visit never touches a US server.
Every outbound call, inventoried
We keep a jurisdiction verdict for every network call the service makes — sovereignty is audited, not assumed.
Self-hosted bot defence
Our CAPTCHA is a self-hosted proof-of-work challenge. No third-party vendor, no data sent anywhere.
Tenant-bound tokens
Access tokens are cryptographically audience-bound to your tenant — a token minted for one tenant is invalid against another.
Exit with everything
Full export through the API, password hashes included. Leaving is a product feature, not a negotiation.
Region on the record
Your region is shown read-only in the dashboard — read-only because there is nothing to decide: we operate a single region and replicate to nowhere else. If that ever changes, you will hear it from us before anything moves.
Where sovereignty stands today.
The same rule as everywhere on this site: what is done says done, what is planned says planned.