Trust
Where your data lives. Who handles your money. The unromantic facts.
Marketing pages talk about sovereignty in the abstract. This page lists the actual companies, jurisdictions, and contracts.
Hosting
Primary region
Hetzner Cloud · Frankfurt
All production servers, application data, and customer database. Hetzner Online GmbH, Gunzenhausen, Germany.
Backup region
Hetzner Cloud · Helsinki
Encrypted off-site backups (3-day retention rolling, 30-day weekly snapshots).
We do not use AWS, Azure, or Google Cloud. Customer data does not transit American infrastructure. Hetzner is a German company subject to German and EU law, with no parent company in a non-adequate jurisdiction.
Payment processing
Customer bookings
Mollie B.V.
Amsterdam. Licensed payment institution under DNB. Handles iDEAL, Wero, Bancontact, SEPA, and card payments.
Subscription billing
GoCardless Ltd
London. Licensed payment institution under FCA. Handles Photon, Quantum, and Electron subscriptions via SEPA Direct Debit and Bacs.
We do not use Stripe or PayPal. No customer payment data is sent to or processed by US-based payment processors. Where card payments are necessary, they are handled by Mollie's EU card processing infrastructure.
Jurisdiction & corporate structure
- Operating company
- Atomic Engine Ltd
- Trading name
- Atomic Booking
- Registered in
- Scotland · Companies House
- Tax residency
- United Kingdom
- VAT
- UK VAT registered, EU IOSS-ready
- Data protection
- GDPR + UK GDPR · ICO registered
Subprocessors
Companies that process customer data on our behalf. If we add or change subprocessors we update this list and notify Photon, Quantum, and Electron customers by email at least 30 days in advance.
| Subprocessor | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Compute, storage, backups | Germany, Finland |
| Mollie B.V. | Customer payment processing | Netherlands |
| GoCardless Ltd | Subscription billing | United Kingdom |
| Postmark (ActiveCampaign EU) | Transactional email | EU region |
| Cloudflare | DNS, DDoS protection (no proxy on customer data routes) | Global |
| Plausible Insights OÜ | Marketing site analytics (no cookies, no PII) | Estonia |
Status & incidents
Real-time service status: status.atomicbooking.io (live at launch).
We publish post-mortems on any incident lasting longer than 5 minutes within 48 hours. No spin, no soft language. The post-mortem template is in our GitHub repo.