# Stack Overview

## Architecture

The Noveu platform is built from modular layers that together form the digital workplace of Noveu, primarily hosted in Europe.

```
┌─────────────────────────────────────────────────────────────┐
│                          USER LAYER                         │
│                          Web Portal                         │
└─────────────────────────────────────────────────────────────┘
                              │
┌─────────────────────────────────────────────────────────────┐
│                      APPLICATION LAYER                      │
│              Mail | Calendar | Contacts | Files             │
│          Chat (beta) | Noveu Meet via a link (beta)         │
└─────────────────────────────────────────────────────────────┘
                              │
┌─────────────────────────────────────────────────────────────┐
│                        PLATFORM LAYER                       │
│   Identity │ Access │ Compliance │ Monitoring               │
└─────────────────────────────────────────────────────────────┘
                              │
┌─────────────────────────────────────────────────────────────┐
│                     INFRASTRUCTURE LAYER                    │
│   Compute │ Storage │ Network │ Security │ Backup           │
└─────────────────────────────────────────────────────────────┘
                              │
┌─────────────────────────────────────────────────────────────┐
│                         DATA CENTRE                         │
│   Hetzner, Falkenstein (DE) │ ISO/IEC 27001 (Hetzner)       │
└─────────────────────────────────────────────────────────────┘
```

## Components per Layer

### User layer

| Component | Description | Technology |
|-----------|--------------|-------------|
| Web Portal | Browser-based access | React, HTTPS |

### Application layer

| Module | Functionality | Standards |
|--------|-----------------|-------------|
| Mail | Email with enforced TLS for transport | IMAP, SMTP |
| Calendar | Calendar and planning | CalDAV; web app and API |
| Contacts | Address book | CardDAV; web app and API |
| Files | File storage | Own REST API |
| Chat (beta) | Real-time messaging | |
| Noveu Meet (beta) | Meeting via a link | |

### Platform layer

| Service | Function | Integrations |
|---------|---------|-------------|
| Identity | One Noveu login and user management | OIDC |
| Access | RBAC (Zitadel); rights per folder via Noveu Bestanden | Zitadel, Noveu Bestanden |
| Compliance | Audit log per organisation | CSV export |
| Monitoring | Observability | Prometheus, Grafana |

### Infrastructure layer

| Resource | Specification | Redundancy |
|----------|--------------|-------------|
| Compute | Dedicated server at Hetzner (Proxmox VE) | One physical server; every night an encrypted copy of the databases and the mail goes to separate object storage at Hetzner, outside this server and also in Falkenstein |
| Storage | Storage on the same server | |
| Security | Firewall; DDoS protection via Cloudflare at the edge | |
| Backup | Backups are encrypted | Hetzner data centre Falkenstein (DE) |

## Where data is stored

### Locations

Processing and storage take place in:
- **Data and backups**: in Germany, in a Hetzner data centre in Falkenstein (Hetzner is certified according to ISO/IEC 27001:2022 for the infrastructure and operations of its data centre parks; [Certification of Hetzner](https://www.hetzner.com/unternehmen/zertifizierung/), consulted 5 October 2026)
- **Text generation**: Mistral AI SAS (French company; according to Mistral, in the EU by default) since 29 August 2026
- **Edge and DDoS**: Cloudflare, Inc. (US); the only sub-processor with a US nexus, under the EU-US DPF and SCCs

The complete and current list is on [the sub-processors page](https://noveu.eu/en/legal/sub-processors).

### Legal

- Dutch law applies
- Dutch company
- Designed for the GDPR

### Technical

- Backups are in the Hetzner data centre in Falkenstein (Germany). Backups are encrypted.
- Encryption in transit (TLS 1.2 or higher, TLS 1.3 is supported)

## Integrations

### Enterprise

| System | Type | Protocol |
|---------|------|----------|
| Any IMAP mailbox | Mail migration (in development) | IMAP |

### Security

The audit log per organisation can be exported as CSV (in the app: Instellingen, Auditlog).

## Deployment Models

| Model | Description | Suitable for |
|-------|--------------|---------------|
| Shared | Multi-tenant platform, data separated per organisation at application level | All customers |

## Availability and support

What we promise about availability and response times is in one place: the SLA at [noveu.eu/legal/sla](https://noveu.eu/en/legal/sla). In short:

| Topic | What applies |
|-----------|-----------|
| Availability | 99.5% per month as a target |
| First response, Werkplek Basis and Noveu Mail | Within 2 working days (target) |
| First response, Werkplek Pro | Within 1 working day (target) |
| Custom work | By quote |