EasyScep

The one click Cloud PKI with focus on ease of use and compliance which enables secure networking for WiFi and other types of networks.

Generally available·snapshot 2026-11-15.1

Subprocessors

Subprocessors used to deliver EasyScep. Every subprocessor below is used whichever data residency boundary you choose; where each one processes data is its processing region. Machine-readable: JSON, CSV.
Subprocessor	Processing region	Parent jurisdiction	Relationship	DPA
Herodesk	EU (Germany)	Denmark	Direct	On file
Support ticketing for all products and all residency boundaries: support requests and the contact details of the customer staff who submit them. Support data is deleted or irreversibly anonymised 365 days after the ticket is closed.Data: Support request content; Contact details of customer staff submitting requests
Mistral AI SAS	EU	France	Direct	On file
AI-assisted diagnostics for EasyScep, only when the customer enables the feature (off by default) and selects Mistral as the AI provider. Zero data retention applies to inputs and outputs, and submitted data is not used for model training.Data: Diagnostic data (only when enabled and Mistral is selected)
Railsware Products Studio LLC (Mailtrap)	United States	United States	Direct	Not held
Delivery of transactional and notification e-mail sent by our products, for tenants whose primary region is in the United States or Canada. Delivery logs are kept for 15 days and message bodies for 7 days.Data: Recipient e-mail addresses; Message content; Delivery metadata
Scaleway SAS	European Union (France)	France	Direct	On file
Delivery of transactional and notification e-mail sent by our products, for tenants whose primary region is in the EU/EEA. The service is operated entirely within the EU, and no personal data is transferred outside the EU. E-mail data is kept for up to 7 days.Data: Recipient e-mail addresses; Message content; Delivery metadata

Processing region: where the subprocessor processes the data. Parent jurisdiction: the country whose law governs the subprocessor's parent company. Relationship: Direct when we contract with the subprocessor, Sub-subprocessor when it is reached through another processor. DPA: whether a data processing agreement with it is on file.

Availability and continuity

EasyScep has a 99.95% availability target. Contractual recovery objectives are measured from incident declaration within supported hours (Monday to Friday, 08:00 to 17:00 CET/CEST, excluding Danish public holidays):

Certificate issuance and enrolment: RTO 8 hours, RPO 1 hour
Revocation status publication (OCSP/CRL): RTO 8 hours, RPO 1 hour
Customer/admin portal and API: RTO 48 hours, RPO 1 hour

A single region provides full service capability, so the loss of one region reduces redundancy rather than availability. For a tenant without a secondary region, loss of the entire primary region is excluded from these objectives. In that case the service is restored in the same boundary as soon as reasonably practicable.

Monthly availability targets. A plane is one part of the service measured on its own; each row has its own target.
Plane	Monthly target	Why
Certificate issuance and enrolment (SCEP)	99.95%	Unavailability blocks new enrolment and certificate renewal. RTO 8 h, RPO 1 h.
Revocation status publication (OCSP/CRL)	99.95%	Relying parties may fail closed on an unreachable responder, blocking authentication even when issuance is healthy. RTO 8 h, RPO 1 h.