EU hosting
On-Premise certificate management, European cloud
Your sensitive data stays on your servers. sslbrain Cloud (EU) runs at UpCloud, and all customer data and all operations are in the EU.
Why self-hosted
Automation needs keys to firewalls, load balancers, servers and DNS. That is why they are kept encrypted in your sslbrain On-Premise, out of reach of a supply chain attack on us, and Cloud cannot connect in.
Stays on your server
The sslbrain Cloud service handles
Where in the EU
The infrastructure provider UpCloud is based in Finland. It runs sslbrain Cloud in data centers in five EU countries.
Denmark
The Netherlands
Sweden
Germany
Finland
Data is kept in several copies. Backups are always stored in one or more EU countries, separate from the country where the backup is taken.
All data centers are certified to ISO 9001, ISO 14001, ISO 22301, ISO 27001, and ISO 50001, as well as SOC 1 and SOC 2 Type II. They operate on 100% renewable energy.
If something is down
- Your sslbrain On-Premise works even when Cloud is down. It keeps running and installing the certificates it holds, and it can be unlocked with the 12 backup words. Renewal starts a third of the lifetime before expiry, so there is ample time to complete it once Cloud answers again.
- Cloud switches CA by itself. If a CA is down, returns errors or rate-limits orders, Cloud moves on to the next CA in line, by default Let's Encrypt and then Google Trust Services. If a CA can no longer be trusted, it is switched off and issuance continues with the next.
Sub-processors
Suppliers that process your data on our behalf in sslbrain Cloud (EU).
| Supplier | Ownership | Data stored in | Used for |
|---|---|---|---|
| UpCloud | Finland | EU | Server and database hosting |
| OVHcloud | France | EU | Server and database hosting |
| mailbox.org | Germany | EU | |
| Microsoft 365 | USA | EU | Email and office systems |
| Lettermint | Netherlands | EU | System emails |
Certificate authorities process certificate data as independent controllers.
| Independent controller | Role |
|---|---|
| Certificate authorities (CAs) | Independent data controllers for issuance, validation and Certificate Transparency logging of the certificates the customer orders. The CA follows the certificate profile the customer chooses |
Website analytics on FairSSL and sslbrain sites are collected on our own infrastructure in the EU. No third-party analytics are used on customer-facing services.
Certificate Authorities (Let's Encrypt, Google Trust Services, Sectigo, DigiCert, and others) act as independent controllers for certificate issuance under CA/Browser Forum requirements. Domain names in publicly issued certificates are logged in public Certificate Transparency (CT) logs.
Danish SSL company since 2010
FairSSL A/S, CVR 33075782, Denmark. 16 years in the SSL certificate industry.
We deliver certificates to Danish government agencies, defense and emergency services, regions, municipalities, hospitals, energy and telecommunications companies, banks and pension providers, and enterprises of all sizes.
The source code for sslbrain is available for inspection. Your security team can inspect every line of code running on your infrastructure. No black boxes. The Windows service agent is delivered as an MSI, and you can build it yourself from the source code.
All customer data and all operation in the EU
What is American does not touch customer data: optional sign-in with Google, Microsoft or GitHub, and signing of the Windows installer through Microsoft Azure, which Microsoft requires. Business email (Microsoft 365) comes from an American company and keeps data in the EU, see the sub-processors above. Invoicing goes through FairSSL's web shop at fairssl.dk, which runs on Amazon Web Services in Germany.
Get started
Download sslbrain and manage your certificates in minutes.