We will show you exactly what we run, including the parts that are not finished.
How this website reaches you
This site is built with Publii, an open-source tool that turns our pages into a plain static site with no database and no server-side code to attack. We publish it on Codeberg Pages, a service run by Codeberg e.V., a non-profit association based in Berlin that runs its own hardware.
Which means this page is not self-hosted. It is hosted by somebody else. That somebody is not Google, not Microsoft and not Cloudflare, and there are no analytics, no cookies and no trackers on it. But it is not our server, and we are not going to write "self-hosted" in the footer of a page that is sitting on a German non-profit's kit. When we move it onto our own server we will say so here, with the date.
What we are still moving off
SafeHaven's own office is not yet fully on the stack below. We are in the middle of that migration and we are not going to claim it is done while it is not. Ask us on the first call exactly what we are still running and when it goes. We will tell you, because the alternative is that you find out on your own, and at that point nothing else on this website is worth anything to you.
What we build for clients
Email on Proton Mail: end-to-end encrypted, based in Switzerland, and Proton will sign a HIPAA Business Associate Agreement where one is needed. Proton's client apps are open source. Its server software is not, and we would rather tell you that than round it up.
Files, calendars and contacts on Nextcloud, with document editing through Collabora. Shared passwords in Vaultwarden. Secure remote access over WireGuard or NetBird. Network-level threat blocking with AdGuard Home. Encrypted off-site backups with Restic. Uptime checks with Uptime Kuma. Where a client needs full security monitoring, Wazuh on its own dedicated system.
Nextcloud, Collabora, Vaultwarden, WireGuard, NetBird, AdGuard Home, Restic, Uptime Kuma, Wazuh and Publii are all open source. All of it runs on infrastructure you own, or that we manage on your behalf. None of it is in the business of collecting or selling your data. That is the whole point.
Book a discovery conversation, and check any of this for yourself.
