Company information

Who operates Astrina

The service is operated as "Astrina" at astrina.io. Across this site and our documentation, the operator is referred to as "Astrina.io" or simply "we".

Legal entity details

Astrina is currently an independently operated service. We do not publish separate legal entity details at this time. That means there is no company registration number, no VAT identification number and no postal address on this page — not because they are hidden, but because we will not state details we have not published.

If you need company details for a contract, an invoice, or a vendor onboarding or procurement review, write to us and we will deal with it directly.

Contact

support@astrina.io is our only contact address. Please use it for everything:

• General questions, billing, contracts and invoicing requests
• Privacy questions, data access and data deletion requests
• Security vulnerability reports

We do not publish any other contact channel.

Where the service runs

• Hosting: OVH, in the EU. The server is managed with the Hestia control panel, and the database (MariaDB/MySQL) runs on the same server.
• DNS, CDN and TLS proxy: Cloudflare, in Full (strict) mode. The origin certificate is issued by Let's Encrypt.
• Outbound email: our own Exim mail server (noreply@astrina.io), with DKIM configured. We do not use a third-party mail provider.

The complete list of companies that process data as part of running the service is published on the subprocessors page.

What we do not offer

We would rather be plain about this than let you assume otherwise:

• No public service level agreement. An SLA exists only under a separately concluded individual contract. We do not publish uptime figures or guaranteed response times.
• No ISO, SOC 2 or any other certification, and no published penetration test.
• No bug-bounty programme — vulnerability reports still reach us at support@astrina.io.
• No off-site backup. Hestia takes a daily backup of files and database at approximately 05:12 UTC, stored on the same server. Restoration means restoring the latest daily copy; no RTO or RPO is guaranteed.
• No two-factor authentication and no SSO for the Astrina panel itself.

The security measures that are actually in place are listed on the security page.

Related documents

• Terms of Service — the rules for using Astrina.
• Privacy Policy — what data we store, why, and for how long.
• Data Processing Agreement — for customers who process personal data through Astrina.
• Subprocessors — the complete list of companies involved in running the service.
• Security — the measures we have in place.