smbCloud Trust Center

Where smbCloud runs, who else touches your data, and how to reach us about security or privacy.

Who we are

• ControllerSplitfire AB
• Org.nr559511-8323
• RegisteredStockholm, Sweden
• ProductssmbCloud platform, smbCloud Mail, MailX, AuthX, CLI

Where your data lives

Application servers and databases run in the EU, on Hetzner in Nuremberg, Germany. Mail and messaging run on AWS in eu-north-1 (Stockholm, Sweden). Error monitoring uses Sentry’s EU region.

Some subprocessors below are US-headquartered. Where they process personal data, transfers rely on the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

Subprocessors

Third parties that may process customer data on our behalf.

• Hetzner Online GmbH Germany
  Servers, hosting, and database storage for the smbCloud platform.
• Amazon Web Services EU (Stockholm)
  Mail send and receive (SES), inbound mail storage (S3), mail routing (Lambda), notifications (SNS), and SMS.
• Stripe Ireland / US
  Payment processing and subscription billing. We never store card numbers.
• Sentry (Functional Software, Inc.) EU region
  Application error and crash reporting.
• Namecheap US
  Domain registration and DNS records for customer domains we provision.
• Apple US / Ireland
  App Store distribution, in-app purchase, and receipt verification.
• Google US / Ireland
  Google Play distribution and in-app purchase verification.
• GitHub US
  Source hosting, deploy automation, and GitHub sign-in.
• IPinfo US
  Coarse IP-to-region lookup for routing telemetry. No account data is sent.

How we work

• TLS on every public endpoint, certificates renewed automatically.
• Passwords are hashed; API access uses OAuth 2.0 and OIDC tokens.
• Secrets live in server environment files, never in the repository.
• Access to production is limited to company staff over SSH keys.
• Customer mail content is stored only to deliver the mail service.

What we do not claim

Splitfire AB is a small company. We hold no SOC 2 or ISO 27001 certification today, and we would rather say so than imply otherwise. Ask us directly if you need details for a vendor review.

Report a problem

Found a vulnerability, or have a privacy question? Email us and we will reply. Please do not open a public issue for security reports.

security[at]smbcloud[dot]xyz · vulnerability reports
privacy[at]smbcloud[dot]xyz · data access and erasure
(+46) 728 538 288

Last updated 27 July 2026.

Splitfire AB, Org.nr: 559511-8323 · smbCloud · Privacy Policy · Terms of Service