Sistava

Infrastructure and Hosting

Where and How We Run

European Data Centers

Sistava runs on enterprise-grade cloud infrastructure hosted in ISO 27001-certified data centers in Germany, with additional capacity in Finland. Keeping our primary infrastructure inside the European Union means your data stays within European data-protection jurisdiction by default, without you having to configure anything. Our compute, database, cache, and workflow engine all run inside this European footprint. The specific providers and the data they handle are documented on our public Sub-processors page, which we keep current as our stack evolves.

Production Isolation

Production is fully separated from development and staging. Our staging environment is an independent clone that never contains real customer data, so engineers test and debug against synthetic data and never touch live customer records. All infrastructure is defined as code and version-controlled. Every change to how the platform is provisioned is reviewed, repeatable, and auditable, rather than applied by hand to live servers. This removes a whole class of human error and configuration drift.

Edge and Denial-of-Service Protection

Incoming traffic is filtered at the network edge before it ever reaches the application. A global content-delivery and security layer absorbs volumetric traffic floods, and request rate limiting combined with automated bad-actor filtering protects against abuse and denial-of-service attempts. Internal services run on a private cluster network with default-deny policies, so only explicitly permitted traffic flows between components. Nothing in the platform is exposed to the public internet unless it needs to be.

Resilience

Customer data is backed up daily with continuous transaction-log archiving, retained in a separate failure domain, and validated for restore. Full recovery objectives, uptime commitments, and our disaster-recovery posture are documented on our Reliability page. Deployments are zero-downtime by default, so routine releases and patches reach production many times a day without interrupting your work.

What this means for customers