Stack Overview
Overview of the Noveu stack: the modular layers of the platform, the infrastructure and the processing locations.
Architecture
The Noveu platform is built from modular layers that together form the digital workplace of Noveu, primarily hosted in Europe.
┌─────────────────────────────────────────────────────────────┐
│ USER LAYER │
│ Web Portal │
└─────────────────────────────────────────────────────────────┘
│
┌─────────────────────────────────────────────────────────────┐
│ APPLICATION LAYER │
│ Mail | Calendar | Contacts | Files │
│ Chat (beta) | Noveu Meet via a link (beta) │
└─────────────────────────────────────────────────────────────┘
│
┌─────────────────────────────────────────────────────────────┐
│ PLATFORM LAYER │
│ Identity │ Access │ Compliance │ Monitoring │
└─────────────────────────────────────────────────────────────┘
│
┌─────────────────────────────────────────────────────────────┐
│ INFRASTRUCTURE LAYER │
│ Compute │ Storage │ Network │ Security │ Backup │
└─────────────────────────────────────────────────────────────┘
│
┌─────────────────────────────────────────────────────────────┐
│ DATA CENTRE │
│ Hetzner, Falkenstein (DE) │ ISO/IEC 27001 (Hetzner) │
└─────────────────────────────────────────────────────────────┘
Components per Layer
User layer
| Component | Description | Technology |
|---|---|---|
| Web Portal | Browser-based access | React, HTTPS |
Application layer
| Module | Functionality | Standards |
|---|---|---|
| Email with enforced TLS for transport | IMAP, SMTP | |
| Calendar | Calendar and planning | CalDAV; web app and API |
| Contacts | Address book | CardDAV; web app and API |
| Files | File storage | Own REST API |
| Chat (beta) | Real-time messaging | |
| Noveu Meet (beta) | Meeting via a link |
Platform layer
| Service | Function | Integrations |
|---|---|---|
| Identity | One Noveu login and user management | OIDC |
| Access | RBAC (Zitadel); rights per folder via Noveu Bestanden | Zitadel, Noveu Bestanden |
| Compliance | Audit log per organisation | CSV export |
| Monitoring | Observability | Prometheus, Grafana |
Infrastructure layer
| Resource | Specification | Redundancy |
|---|---|---|
| Compute | Dedicated server at Hetzner (Proxmox VE) | One physical server; every night an encrypted copy of the databases and the mail goes to separate object storage at Hetzner, outside this server and also in Falkenstein |
| Storage | Storage on the same server | |
| Security | Firewall; DDoS protection via Cloudflare at the edge | |
| Backup | Backups are encrypted | Hetzner data centre Falkenstein (DE) |
Where data is stored
Locations
Processing and storage take place in:
- Data and backups: in Germany, in a Hetzner data centre in Falkenstein (Hetzner is certified according to ISO/IEC 27001:2022 for the infrastructure and operations of its data centre parks; Certification of Hetzner, consulted 5 October 2026)
- Text generation: Mistral AI SAS (French company; according to Mistral, in the EU by default) since 29 August 2026
- Edge and DDoS: Cloudflare, Inc. (US); the only sub-processor with a US nexus, under the EU-US DPF and SCCs
The complete and current list is on the sub-processors page.
Legal
- Dutch law applies
- Dutch company
- Designed for the GDPR
Technical
- Backups are in the Hetzner data centre in Falkenstein (Germany). Backups are encrypted.
- Encryption in transit (TLS 1.2 or higher, TLS 1.3 is supported)
Integrations
Enterprise
| System | Type | Protocol |
|---|---|---|
| Any IMAP mailbox | Mail migration (in development) | IMAP |
Security
The audit log per organisation can be exported as CSV (in the app: Instellingen, Auditlog).
Deployment Models
| Model | Description | Suitable for |
|---|---|---|
| Shared | Multi-tenant platform, data separated per organisation at application level | All customers |
Availability and support
What we promise about availability and response times is in one place: the SLA at noveu.eu/legal/sla. In short:
| Topic | What applies |
|---|---|
| Availability | 99.5% per month as a target |
| First response, Werkplek Basis and Noveu Mail | Within 2 working days (target) |
| First response, Werkplek Pro | Within 1 working day (target) |
| Custom work | By quote |
Read more
- BlogThree questions about digital sovereignty for your suppliersWhere is your data, who can access it and can you leave again?
- BlogData sovereignty for SMEs: where is your customer data?It starts small: with your mail, your quotes and your customer file.
- PageSovereign cloud: what it is and what it is notWhat the term covers and where the limits are.
What is your next step?
Want to know what this looks like for your organisation? See how Noveu approaches it, or schedule a conversation.