Where your data is processed matters. Not as an abstract principle — as a legal obligation.
Under GDPR, transferring personal data outside the EU requires specific legal mechanisms. Since the Schrems II ruling invalidated the EU-US Privacy Shield, relying on US-based infrastructure providers for sensitive traffic has become legally complicated. Standard Contractual Clauses exist, but they require case-by-case risk assessments, and enforcement agencies across Europe are increasingly skeptical.
How ProxyPass Eliminates the Complexity
ProxyPass eliminates this complexity entirely. The entire infrastructure — cloud servers, management portal, data storage — runs on servers in Germany. Your tunnel traffic never touches a non-EU server. There are no international data transfers to evaluate, document, or justify.
Jurisdiction Matters
This is not just about where servers are physically located. It is about the legal jurisdiction that governs access to your data. A server in Germany is subject to German and EU law exclusively. No foreign government can compel access through their own legal mechanisms without going through EU judicial cooperation processes.
Many tunneling services run on AWS, Google Cloud, or Azure — US-headquartered companies subject to US jurisdiction, including the CLOUD Act, which can compel disclosure of data stored abroad. Even if they operate EU data centers, the jurisdictional question remains.
Scenario: The Enterprise Vendor Questionnaire
You are evaluating tunneling providers for your company. Procurement sends a vendor security questionnaire. Question 14: "Where is data processed and stored? Are any US-based entities involved in data processing?"
With a US-based provider, the answer requires paragraphs: explaining SCCs, transfer impact assessments, supplementary measures, Schrems II compliance documentation, and a legal opinion on CLOUD Act risk.
With ProxyPass, the answer is: "Data is processed on servers in Germany, operated by QSP GmbH, an Austrian company. No US-based entities are involved in data processing. No data leaves the EU."
Procurement checks the box. Legal approves. You move on.
EU Operator, EU Infrastructure
ProxyPass is operated by QSP GmbH, an Austrian company, and runs on IONOS, a German-headquartered hosting provider, on German servers, under German and EU law. Operator in Austria, infrastructure in Germany — both EU member states, both under GDPR, no cross-border complexity. No ambiguity. No lengthy legal analysis required. No data processing agreements with US entities to negotiate.
If GDPR compliance is a requirement for your business — and in the EU, it is — ProxyPass meets it by architecture, not by policy.