A cloud that cannot leave the country.
When the requirement is not “encrypted” but “physically here”, the shape of the answer changes: not a provider with a European region, but hardware whose address you can walk to.
The situation
A US-owned provider is subject to US law wherever its servers sit, and an EU region does not change that. For some work that is a procurement footnote; for public sector, health, law and defence adjacent work it is the whole question.
The usual answer is a self-hosted file server, which solves location and loses everything else — remote access, mobile clients, sharing with outsiders, and any story about a second site.
What MeshHold does about it
The data is on machines you chose
Every node is yours. There is no operator account, no support back-door, and no key held anywhere but on your own hardware. Where the bytes live is a question your facilities team can answer.
Two sites without a provider between them
A second node in another building or another city replicates directly, peer to peer. The replication factor is the vault's, so one folder can live in three places and another in one.
Remote access without opening the building
The mesh VPN and tunnels reach an internal service from outside without publishing it. Staff get to the files; the internet does not.
A story for the auditor
A tamper-evident audit log, per-node encryption at rest, TOTP on the web UI, and a protocol written down rather than reverse engineered. What we cannot give you is a certification — see the security page for exactly which ones.
Where it does not fit
Every page like this one is a sales pitch. Here is the part that is not.
- There is no legal entity behind MeshHold yet, so a DPA or an SLA signed by a vendor is not available. If your procurement requires one, this is a blocker today and we would rather you knew now.
- No external security audit has been done, and no ISO 27001.
- Directory integration — OIDC, SAML, LDAP — is Business-tier work that has not shipped. Today a node has one set of credentials.
Talk to us about it
There is one person on the other end, so a conversation is a conversation and not a discovery call.