Commitments
What ShadGramers
actually commits to.
No marketing promises. Here is what you get, what you don't pay for, and what we don't do — assumed exceptions included.
The four pillars of our offer
A fixed price, no surprises
A monthly fee per user, published openly. No extra charge per invoice sent, per GB of storage used, or per feature enabled. If the price changes, you are notified 60 days in advance.
Installed, managed and maintained for you
Your applications are deployed with a secure configuration by default, updated regularly, and monitored around the clock. If an incident occurs, you are notified before you would have noticed it yourself.
Your data belongs to you
Full export at any time, in open formats (MBOX, ZIP, ICS, VCard, SQL). If you decide to leave, we help you migrate. No exit fees.
Hosting in Europe, no detours
Your data is stored in the European Union, with the hosting providers listed on our "Sub-processors" page. It never passes through any service subject to US legislation. This is a contractual commitment, not a marketing line.
What this actually changes for your business
PDP / Factur-X obligation (Sept. 2026)
- All French companies will have to issue and receive electronic invoices
- Our pdp-relay stack (Dolibarr + Factur-X) prepares you for it now
- 10-year legal archiving included
- Flows validated by Chorus Pro / FNFE-MPE
GDPR — what you must be able to prove
- Your customer data never leaves the EU (Art. 46)
- Encryption at rest and in transit (Art. 32)
- Retention periods documented per stack
- Contractual DPA available on request
NIS2 — if it applies to you
- Documented incident management policy
- Monthly restore tests (declared RTO / RPO)
- Access logging retained for 90 days
- NIS2 report available on request
Backups — because incidents happen
- 3-2-1 policy: local + replication + offsite Scaleway FR
- AES-256 encryption client-side before upload
- Automated monthly restore test
- Restore certificate available on request
Assumed exception: Stripe for our payments
Stripe Inc. is a US company, subject to the Cloud Act.
Stripe is used solely to process payments on the ShadGramers site. The data sent to Stripe is limited to: email, amount, and the slug of the service ordered. No data belonging to your organization ever passes through Stripe.
Stripe exit plan — H2 2027 horizon:
- Mollie BV (Netherlands, EU) — card payment and SEPA transfer
- Chargebee EU (EU) for complex recurring billing
- Migration planned for H2 2027
Where your data is hosted
Hostinger International Ltd
Chypre (UE)
Entité UE (Chypre) — RGPD directement applicable
Hébergement principal
Scaleway SAS
France
ISO 27001, HDS, datacentres FR-PAR
Stockage offsite + datacentre secondaire
OVHcloud SAS
France
ISO 27001/27701, SecNumCloud compatible
VPS et instances Public Cloud
Excluded from our offer: AWS, Azure, GCP, Cloudflare, DigitalOcean, Vercel, Netlify — all subject to the US Cloud Act.