Clusters, databases and buckets are created in your Scaleway project in Paris or Amsterdam. The control plane runs in the EU, operated by a German company. And everything Clusterward creates keeps working without Clusterward.
Digital sovereignty means that you decide where your data lives, who can access it and whether you can switch providers. Clusterward gives a concrete answer to all three questions: your infrastructure is created in your own Scaleway project in an EU data center, with your IAM key. The control plane is operated by BitKollegen GmbH on Scaleway in the EU, in a workspace with its own database and its own key. And because Clusterward only creates standard Kubernetes objects, Scaleway resources and Cloudflare records, your applications keep running without Clusterward.
You create a Scaleway project and store its IAM key as a provisioning profile.
You choose Paris or Amsterdam per cluster; databases and buckets follow the cluster.
Provisioned clusters get nodes without a public IP and an API allowlist limited to your address range.
Databases on the private network only, buckets with their own key and policy.
Dumps and archives in a bucket in your workspace, with your retention policy.
If you cancel, clusters and applications keep running in your project.
Not a statement of intent, but properties you can verify in the Scaleway console.
Scaleway operates its data centers in Paris, Amsterdam and Warsaw. Clusterward provisions clusters in Paris or Amsterdam; databases and buckets are created in the same region.
Everything is created with your project’s IAM key and belongs to your Scaleway account. The key is verified before it is stored, kept encrypted and never displayed; you can rotate or revoke it at any time.
Your control plane data lives in a dedicated database with its own data key and its own backup bucket. No tables shared with other customers.
Private nodes, API allowlist, databases without a public endpoint, hardened pods, mandatory 2FA and an audit log. None of it has to be switched on after the fact.
Clusterward creates standard Kubernetes objects, Scaleway resources and DNS records. You can carry on working with kubectl and the Scaleway console at any time. There is no proprietary runtime. You can export the entire configuration as a JSON file whenever you like.
A GDPR data processing agreement is available on request. The operator is BitKollegen GmbH, a German company with ISO 27001 certification.
French cloud provider, data centers in the EU, your contractual partner for the infrastructure.
Operator of Clusterward, headquartered in Germany, ISO 27001 certified.
Optional for DNS zones and proxying; only if you register zones.
Optional for builds on GitHub runners; alternatively, Kaniko builds in your cluster.
Every row can be verified in the Scaleway console or in the cockpit.
| Data | Location | Owner |
|---|---|---|
| Applications and clusters | Kapsule in Paris or Amsterdam | Your Scaleway project |
| Databases | Managed Database, private network, same region | Your Scaleway project |
| Files and uploads | Object Storage, same region | Your Scaleway project |
| Container images | Container Registry, same region | Your Scaleway project |
| Backups from offboardings | Bucket in your workspace | Your workspace |
| Control plane data | Workspace database on Scaleway in the EU | Your workspace, operated by BitKollegen |
| DNS records | Cloudflare, if zones are registered | Your Cloudflare account |
| Database backups | Scaleway Managed Database, your region | Your Scaleway project |
How the workspace keeps your control plane data separate is explained under Your own workspace. Roles, mandatory 2FA, the audit log and encrypted credentials are covered in Security & access.
Cluster provisioning shows how a cluster is created in your project, secure by default. We answer questions about the DPA and contracts via Contact.
Your own workspace with its own database and its own key.
Go to Platform operatorsRoles, mandatory 2FA, audit log and IP allowlist.
Go to Security & accessKapsule clusters secure by default, with Private Network and gateway.
Go to Cluster provisioningCan’t find your question? Write to us – we usually reply on the same business day.
Ask a questionIn the demo, we show where each resource is created, who owns it and what an exit looks like. Questions about the DPA and compliance are welcome.
