Skip to content
My account

Your contracting party is ENTRONYX Deutschland GmbH based in Cologne; German law applies. Here you will find in the order of a procurement process what is otherwise spread over several pages, each detail with its source. You can request a quote via the enquiry form.

Request a quoteDocuments

Each detail states its source. The linked document in the stated version is authoritative.

Contracting party
Cologne
ENTRONYX Deutschland GmbH
Certificates
4
with scope and term
SLA version
4.2
valid from 1 July 2026
Documents
5 PDF
with version, for download

Who you conclude the contract with and which law applies

A company based in Cologne, German law, processing in data centres in Germany and Finland. The two statements below are identical on the Security and compliance page.

One company, one law

The platform is operated by ENTRONYX Deutschland GmbH, a company based in Germany. There is no parent company, no holding company in a third country and no intermediary company through which a foreign authority could intervene.

What the CLOUD Act actually regulates

The US CLOUD Act of 2018 obliges providers subject to US law to hand over data upon court order — regardless of the country in which it is stored. The connecting factor is not the server location, but the legal control over the operator. For us, this connecting factor is clear: the operating company is subject to German and European law.

All four statements on data sovereignty

Contracting party and legal framework

  1. Contracting party

    Provision
    ENTRONYX Deutschland GmbH
    Reference
    Legal notice

  2. Registered office

    Provision
    Cologne, Germany
    Reference
    Legal notice

  3. Commercial register entry

    Provision
    Register court: Amtsgericht Köln · Commercial register number: HRB 98908 · European Unique Identifier (EUID): DER3306
    Reference
    Legal notice

  4. Corporate affiliation

    Provision
    No parent company, no holding company in a third country
    Reference
    Security · Data sovereignty

  5. Applicable law

    Provision
    GDPR, BDSG, German law
    Reference
    Security · Data sovereignty

  6. Choice of law in the contract

    Provision
    Law of the Federal Republic of Germany, excluding the UN Convention on Contracts for the International Sale of Goods and the conflict of law rules of international private law
    Reference
    Section 16 (1) Terms and Conditions

  7. Place of jurisdiction and place of performance

    Provision
    Cologne — exclusive place of jurisdiction, provided the customer is a merchant, a legal entity under public law or a special fund under public law
    Reference
    Section 16 (2) and (3) Terms and Conditions

  8. Contract language

    Provision
    German; in the event of deviating language versions, the German version shall prevail
    Reference
    Section 2 (5) Terms and Conditions

  9. Place of processing

    Provision
    Data centres in Germany and Finland — Germany: Frankfurt am Main (fra1, fra2), Berlin (ber1) and Munich (muc1); Finland: Helsinki (hel1). You choose the location when ordering.
    Reference
    Security · Data sovereignty

  10. Data processing agreement (DPA)

    Provision
    Art. 28 GDPR, integral part of the main contract
    Reference
    Section 14 Privacy Policy

The locations are read from the location catalogue: only locations where orders can be placed today are listed here.

Four certificates with scope and validity period

A certificate confirms compliance with a standard, an attestation the judgement of an auditor over a limited period. The scope states whether a certificate refers to our operations or the building in which the platform runs. The row on the GDPR is not a certificate, but an obligation for which there is no recognised certification for our service.

Details per certificate

Certificates by type, audit, scope and term

  1. ISO 27001ISO/IEC 27001:2022 — Information security management system

    Type
    Certificate
    Audited by
    Accredited certification body, annual surveillance audit
    Scope
    Operations of the systems, network and cloud platform including the associated management processes at locations fra1, fra2, ber1, muc1 and hel1
    Term
    Valid until 30 November 2027 · recertification every three years

  2. BSI C5:2020BSI Cloud Computing Compliance Criteria Catalogue, Type 2

    Type
    Attestation
    Audited by
    Auditing firm according to ISAE 3000 (revised)
    Scope
    Bare Metal, Public Cloud, Object and Block Storage, Kubernetes, control plane and customer panel at locations fra1, fra2, ber1, muc1 and hel1
    Term
    Audit period 1 July 2025 to 30 June 2026 · follow-up audit in progress

  3. EN 50600EN 50600 — Availability class of the data centre infrastructure

    Type
    Certificate
    Audited by
    Notified body, assessment per location
    Scope
    Assessment of the data centre infrastructure at the locations where the platform runs — VK4 in Frankfurt am Main (fra1, fra2), Munich (muc1) and Helsinki (hel1); VK3 in Berlin (ber1)
    Term
    Per location, reassessment in case of structural changes

  4. ISO 50001ISO 50001:2018 — Energy management system

    Type
    Certificate
    Audited by
    Accredited certification body
    Scope
    Our operations at locations fra1, fra2, muc1 and hel1 — the certificate is on the respective location map
    Term
    Valid until 14 May 2028 · annual surveillance audit

  5. GDPRRegulation (EU) 2016/679 — General Data Protection Regulation

    Type
    No proof possible
    Audited by
    —
    Scope
    The entire operations of the platform
    Term
    Permanent obligation, no expiry date

We provide the C5 report and the certificate documents on request — details in the documents section.

Five PDF documents, each with a version

Each file is printed from the page it reproduces — there is no separate version alongside the page. The version or date in the table is the same as in the page header.

Contract documents to download

  1. Terms and Conditions

    Content
    Sections 1 to 16: conclusion of contract, scope of services, prices, payment, term, data return, liability, place of jurisdiction
    Version or date
    Version 1 July 2026
    File
    PDFRead as page

  2. Service Level Agreement

    Content
    Availability classes, measurement methods, exclusions, service credits, response times and maintenance windows; integral part of every contract according to Section 10 Terms and Conditions
    Version or date
    Version 4.2, valid from 1 July 2026
    File
    PDFRead as page

  3. Data processing agreement under Art. 28 GDPR

    Content
    Template of the contract concluded with the main contract: subject matter, instructions, sub-processors, audit rights, deletion and return
    Version or date
    Section 14 of the Privacy Policy, version 3 October 2026
    File
    PDFRead as page

  4. List of sub-processors

    Content
    Six contractors with country of incorporation, service, scope and basis
    Version or date
    As of 3 October 2026
    File
    PDFRead as page

  5. Privacy Policy

    Content
    Processing purposes, legal bases, storage periods, data subject rights and cookies according to Art. 13 and 14 GDPR
    Version or date
    Version 3 October 2026
    File
    PDFRead as page

The sample data processing agreement (DPA) and the list of sub-processors are extracts from section 14 of the Privacy Policy and bear its version.

On request

Request anything that is not available as a file on this page via the callback form. There, you can select which documents sales should provide you with.

Request documents

  • Audit report for the C5 attestation, type 2

    C5 report under non-disclosure agreement upon request.

    Security · Evidence

  • Certificate documents with scope

    Upon request, without further conditions.

    Security · Page header

  • Summary of the latest penetration test

    We provide customers with a summary of the most recent penetration test upon request. We do not release the full report — it contains attack paths that would still be useful even if the individual findings have been resolved.

    Security · Vulnerabilities

  • Evidence from data centre operators

    Evidence from data centre operators is available and will be provided upon request during the procurement process.

    Data centres · Requirements

Term, cancellation, price guarantee and end of contract

The rules most frequently asked about in procurement, as stated in the Terms and Conditions — each with paragraph and reference to the exact wording.

Full textTerms and Conditions as PDF

ENTRONYX CLOUD is a demonstration project. The summarised conditions are simulated and have no legal effect; they do not replace legal review.

  1. Order of precedence and own terms

    Section 1 para. 3 and 4 Terms and Conditions

    In case of contradictions, the order of precedence applies: individual agreement, Service Level Agreement, Terms and Conditions, service description.

    Deviating terms and conditions of the customer only become part of the contract if we expressly agree to their validity in text form.

  2. The contract term results from the order.

    Unless otherwise agreed, it is one month and extends by a further month in each case.

  3. Monthly contracts can be cancelled with one day's notice to the end of the term, contracts for 12 or 24 months with 30 calendar days to the end of the term; otherwise they extend by twelve months.

    Resources billed by the hour can be deleted at any time without notice.

    Cancellations require text form; cancellation via the customer panel is sufficient.

  4. The agreed price applies for the entire current contract period; a price increase during the period is excluded.

    Price changes take effect at the beginning of the next period at the earliest and are announced in text form at least 90 calendar days in advance.

    If you object within 30 calendar days, the contract ends at the end of the current period.

  5. Service change and discontinuation

    Section 3 para. 4 and 5 Terms and Conditions

    We announce changes that restrict the service in text form at least 90 calendar days in advance; you can then cancel extraordinarily when they take effect.

    A product line is discontinued with at least twelve months' notice; until then, the service is provided unchanged.

  6. After termination of the contract, the data remains accessible for 30 calendar days; upon request, the period is shortened or deleted immediately.

    The export takes place via the interfaces used; for larger amounts of data, we provide additional bandwidth upon request without a separate fee.

    After the period expires, the data is irretrievably deleted by destroying the encryption key and subsequently overwriting it.

Liability (Section 13), data protection (Section 14) and changes to the conditions (Section 15) are in the full text. Term discounts are granted on the monthly net fees and recalculated for the months already received in the event of premature termination for a reason for which the customer is responsible (Section 8 para. 6).

Availability, service credit and response times

The commitment depends on the class of a product; a deviating commitment is negotiated individually. How it is measured, which periods do not count and how the application works is governed by the Service Level Agreement.

Availability classes

Availability classes according to the Service Level Agreement

  1. Class A

    Commitment
    99.99%
    Downtime per month
    4 min 19 s
    Products
    Backbone and transit, Anycast DNS, highly available Kubernetes Control Plane

  2. Class B

    Commitment
    99.95%
    Downtime per month
    21 min 36 s
    Products
    Cloud instances, Object Storage, Block Storage, highly available managed databases, Load Balancer

  3. Class C

    Commitment
    99.90%
    Downtime per month
    43 min 12 s
    Products
    Dedicated servers, VPS, standard Kubernetes Control Plane, web hosting

If the commitment is not met in a calendar month, there is a service credit on the monthly basic fee of the affected resource — in four steps from 10% to 100%. If our measurement records the shortfall, we issue the service credit without a request. Credit scale and claims process · Measurement method

Support levels

Support levels with initial response for priority P1

  1. Basic

    Initial response P1
    8 h
    Availability
    Mon–Fri 08:00–18:00
    Monthly amount
    included in the price

  2. Business

    Initial response P1
    2 h
    Availability
    P1 24/7, otherwise Mon–Sat
    Monthly amount
    €149.00$172.84 net

  3. Enterprise

    Initial response P1
    30 min
    Availability
    24/7, telephone
    Monthly amount
    €690.00$800.40 net

  4. Critical

    Initial response P1
    15 min
    Availability
    24/7, dedicated phone number
    Monthly amount
    €1,890.00$2,192.40 net

The initial response is the first substantive reply from a responsible person, not a resolution time. The times for P2 to P4 and the classification of priorities can be found in the Service Level Agreement, section 5. The monthly amounts are net amounts without location factor; the same figures are listed in the price list.

Account, invoice and payment terms for public authorities

Public authorities and universities order using a dedicated account type. The table shows how this affects registration, the order process and the invoice.

Conditions for public sector clients

  1. Addressees of the Terms and Conditions

    Provision
    Entrepreneurs within the meaning of Section 14 BGB, legal entities under public law and special funds under public law
    Reference
    Section 1 para. 2 Terms and Conditions

  2. Account type “Public authority or university”

    Provision
    Selectable during registration and in the checkout. The authority or institution takes the place of the company name; the VAT identification number is optional for this account type.
    Reference
    Registration

  3. Routing ID

    Provision
    In the checkout in the “Routing ID / order reference” field, in the customer account under “Cost centre or routing ID”; it appears on every invoice.
    Reference
    Checkout and customer account

  4. Invoicing

    Provision
    For authorities as XRechnung, as guided by the checkout. According to the Terms and Conditions, billing is monthly at the end of the month, electronically in ZUGFeRD 2.3 format; paper only upon express request for a fee according to the price list.
    Reference
    Section 9 para. 1 Terms and Conditions

  5. Payment terms

    Provision
    30 days for public clients. The Terms and Conditions set 14 calendar days from the invoice date, or 30 calendar days if payment terms are agreed.
    Reference
    Section 9 para. 2 Terms and Conditions

  6. Customer account

    Provision
    Opening is free of charge and without a minimum term. A contract for a service is only formed when an order is placed.
    Reference
    Registration

Two ways to reach sales, both with a reference number

Both ways lead to the same form. Every request is recorded under a case number; the confirmation states the channel and deadline of your request.

Sales and quotes

Responsible
Quotes, framework agreements, capacity requests from half a rack, migration projects and price negotiations above the highest tier.
Available
Monday to Friday, 08:00 – 18:00 (CEST)
Deadline
Call back within 4 hours during business hours — voluntary commitment, not part of the SLA
Email
vertrieb@entronyx.cloud

  1. Request a quote

    For a tender, a bill of quantities or a framework agreement. State the scope, location and term; sales will reply with a quote.

    Request a quote

  2. Request a callback

    With your phone number and a time window. In the same form, you select the documents you need for your records — including the C5 report under a non-disclosure agreement.

    Request a callback

Request the quote for your tender

State the scope, location and term. The enquiry is recorded under a reference number; if you prefer a callback, provide your phone number and time window and select the desired documents.

Request a quoteRequest a callback
Price increase during the term
excluded
Data after contract end
available for 30 days
Cancellation of monthly contract
1 day to the end
Place of jurisdiction
Cologne