Differences

This shows you the differences between two versions of the page.

--- pub:trust_center:infrastructure_and_tech_stack [21.07.2026 13:44] – Unicis infrastructure, hosting, and third-party service stack - Scaleway/OVH Predrag Tasevski
+++ pub:trust_center:infrastructure_and_tech_stack [21.07.2026 13:59] (current) – Update: Jitsi and LimeSurvey are self-hosted; GitLab EU for proprietary code Predrag Tasevski
@@ Line 33: / Line 33: @@
   * Compliant with CRA requirements on data residency
-====== Third-Party Services (SaaS) ======
+====== Third-Party Services (SaaS & Self-Hosted) ======
 Unicis integrates with trusted third-party services. Each is contractually obligated to meet our security and compliance requirements.
 ^ Service ^ Purpose ^ Hosting ^ Data Residency ^ Compliance ^
-| **Mautic** | Email marketing, newsletters, lead segments | Cloud | EU | GDPR |
+| **Mautic** | Email marketing, newsletters, lead segments | Self-hosted on Unicis infrastructure | Amsterdam, EU | GDPR |
 | **Dolibarr** | CRM, vendor management, subscriptions | Self-hosted on Unicis infrastructure | Amsterdam, EU | GDPR |
 | **Nextcloud** | Document storage, calendar, video calls (Talk) | Self-hosted on Unicis infrastructure | Amsterdam, EU | GDPR |
 | **OpenProject** | Project management, budgeting, timesheets | Self-hosted on Unicis infrastructure | Amsterdam, EU | GDPR |
 | **Moodle** | Training and learning management | Self-hosted on Unicis infrastructure | Amsterdam, EU | GDPR |
-| **FreeScout** | Support ticketing and inbox management | Cloud or self-hosted | EU | GDPR |
+| **FreeScout** | Support ticketing and inbox management | Self-hosted on Unicis infrastructure | Amsterdam, EU | GDPR |
-| **Jitsi** | Video conferencing (15+ participants) | Cloud | EU | GDPR |
+| **Fider** | Feedback and feature roadmap | Self-hosted on Unicis infrastructure | Amsterdam, EU | GDPR |
-| **GitHub** | Code repository, CI/CD, version control | Cloud | US + EU mirrors | GDPR (SCCs) |
-| **n8n** | Workflow automation and integrations | Self-hosted or cloud | EU | GDPR |
-| **LimeSurvey** | Surveys, polls, feedback collection | Cloud or self-hosted | EU | GDPR |
-| **Wise** | Payment processing and transfers | Cloud | EU | GDPR, PSD2 |
 | **Element/Matrix** | Internal team communication | Self-hosted on Unicis infrastructure | Amsterdam, EU | GDPR |
-| **Discord** | Community and partner communication | Cloud | US/EU | GDPR (SCCs) |
+| **n8n** | Workflow automation and integrations | Self-hosted on Unicis infrastructure | Amsterdam, EU | GDPR |
-| **Fider** | Feedback and feature roadmap | Cloud or self-hosted | EU | GDPR |
 | **Matomo** | Analytics and usage metrics | Self-hosted on Unicis infrastructure | Amsterdam, EU | GDPR |
+| **Jitsi** | Video conferencing (15+ participants) | Self-hosted on Unicis infrastructure | Amsterdam, EU | GDPR |
+| **LimeSurvey** | Surveys, polls, feedback collection | Self-hosted on Unicis infrastructure | Amsterdam, EU | GDPR |
+| **GitLab EU** | Proprietary code repository & CI/CD | Self-hosted / EU-based GitLab | EU | GDPR |
+| **Wise** | Payment processing and transfers | Cloud | EU | GDPR, PSD2 |
+| **Discord** | Community and partner communication | Cloud | US/EU | GDPR (SCCs) |
 ====== Self-Hosted vs. Cloud ======
@@ Line 64: / Line 64: @@
   * ✅ n8n — Integrations/workflows
   * ✅ Matomo — Analytics
-  * ✅ FreeScout — Support (if self-hosted option chosen)
+  * ✅ FreeScout — Support ticketing
+  * ✅ Mautic — Email/marketing **(deprecated soon)**
+  * ✅ Fider — Feedback/roadmap
+  * ✅ Jitsi — Video conferencing (15+ participants)
+  * ✅ LimeSurvey — Surveys/polls/feedback
-**Rationale:** Self-hosting critical services reduces vendor lock-in, ensures data remains fully under Unicis control, and maintains compliance with EU data residency requirements. All self-hosted services are on the same Scaleway infrastructure in Amsterdam.
+**Code Repository:**
+  * ✅ GitLab EU — Proprietary code repository and CI/CD pipeline (EU-based)
+**Rationale:** Self-hosting critical services reduces vendor lock-in, ensures data remains fully under Unicis control, and maintains compliance with EU data residency requirements. All self-hosted services are on the same Scaleway infrastructure in Amsterdam. Proprietary code is stored in EU-based GitLab.
 **Services on Third-Party Cloud (With Data Processing Agreements):**
-  * ☁️ Mautic — Email/marketing (required for scalability)
+  * ☁️ Wise — Payments (PSD2 regulated, no customer data stored)
-  * ☁️ Jitsi — Video (required for reliability at scale)
-  * ☁️ GitHub — Code (industry standard, SCCs in place)
-  * ☁️ Wise — Payments (PSD2 regulated)
   * ☁️ Discord — Community (convenience; no customer data stored)
-  * ☁️ Fider — Feedback (optional; no customer data stored)
 ====== Data Processing & Security ======
@@ Line 95: / Line 98: @@
   * **Element/Matrix** — Self-hosted in Amsterdam (EU)
   * **OpenProject** — Self-hosted in Amsterdam (EU)
+  * **GitLab EU** — Proprietary code (EU)
 Operational data does NOT include customer data and is separated by infrastructure and access control.
@@ Line 108: / Line 112: @@
     * Dolibarr: Vendor subscription records (no customer compliance data)
     * FreeScout: Support conversations (not compliance data)
-    * GitHub: Application code (not customer data)
+    * GitLab: Application code (not customer data)
 ====== Vendor Assessment & Monitoring ======
@@ Line 141: / Line 145: @@
   * OpenProject: Database backups + version control
   * Element/Matrix: Replicated storage in Amsterdam
-  * FreeScout: Cloud provider maintains uptime SLAs
+  * FreeScout: Local backups + redundancy
+  * Jitsi: Video sessions (no persistent data storage)
+  * GitLab EU: Repository backups + CI/CD logs
 ====== Cost Transparency ======
@@ Line 178: / Line 184: @@
   * Logging: ELK Stack (centralized, encrypted)
   * IDS/IPS: CrowdSec (self-hosted)
+**Code Repository & CI/CD:**
+  * Repository: GitLab EU (proprietary code)
+  * CI/CD: GitLab Runners (EU-based)
+  * Branching: Git flow with protected main branch
+  * Deployment: Automated via GitLab CI/CD pipeline
 **Security Tools:**
@@ Line 198: / Line 210: @@
   * Primary: Scaleway (Amsterdam) — ACTIVE
   * Secondary: OVH DNS/AI — ACTIVE
+  * Code Repository: GitLab EU — ACTIVE
+  * Mautic: Self-hosted, will deprecate soon
+  * Fider: Self-hosted, active
+  * Jitsi: Self-hosted, active
+  * LimeSurvey: Self-hosted, active
   * No migration planned