Your families' data, protected by design
KinderGuard is built for European childcare, where protecting children's data isn't optional. Here's exactly how we do it.
Where your data lives
All platform data (children, photos, messages and documents) is hosted exclusively in the EU, on Scaleway in Paris. No US provider hosts it. Error monitoring and, where payments are enabled, card payments use the providers in the table below.
Database
Scaleway Managed PostgreSQL in Paris, France (fr-par).
File storage
Scaleway Object Storage: photos and documents in Paris, France (fr-par).
Scaleway Transactional Email, delivered from France (EU).
Realtime messaging
Pusher on the EU cluster. It delivers new messages in real time without storing them.
Our sub-processors
We keep the list short and transparent: platform data is hosted in the EU, and each provider receives only what its role needs.
| Sub-processor | Role | Location | Safeguard |
|---|---|---|---|
| Scaleway | Hosting, PostgreSQL database, file and photo storage, transactional email | Paris, France (EU) | EU-hosted |
| Pusher | Realtime messaging (WebSockets), on the EU cluster | EU / UK | UK adequacy decision |
| Sentry | Error monitoring: technical error reports, without names, emails, cookies or user-entered content | EU (Germany) | EU data region; DPF and SCC |
| Stripe | Online payments, only for kindergartens where payments are enabled on request | Ireland (EU) / US | Data Privacy Framework (DPF) |
This list mirrors the sub-processor table in our Article 28 Data Processing Agreement.
How tenants are isolated
Every kindergarten's rows are isolated at the database layer, not just in application code.
We use PostgreSQL Row Level Security with a tenant-bound database role. The isolation rule is enforced by the database on every single query. Even our own application code cannot read another kindergarten's data through the normal path. Tenant isolation does not depend on the application getting every check right; the database enforces it for us.
Article 28 Data Processing Agreement
Our full Article 28 DPA, including the sub-processor list above, is published in Romanian. Read it in your browser and print or save it for your records.
Read & download the DPASee it for yourself
Book a demo or start a free trial and see how your families' data stays in the EU, isolated and under your control.